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DESCRIPTION 
ELEVATOR CONTROL APPARATUS 

Technical Field 

The present invention relates to an elevator control apparatus 
that performs calculations for controlling operation of an elevator 
by means of a computer. 

Background Art 

For example, in a conventional terminal floor deceleration 
unit for an elevator disclosed in JP-A 58-6885, when a terminal 
detector operates, a terminal floor deceleration command signal 
is generated according to the distance from a position at the time 
when the terminal detector operates to a terminal floor. Such a 
terminal floor deceleration command signal is generated through 
a calculation by a digital calculator. 

However, when an attempt is made to use a computer to perform 
various calculations for safety surveillance and commands regarding 
abnormalities, for example, the surveillance of an overspeed and 
the surveillance of a break in a rope as well as the surveillance 
of the position of a car by the terminal floor deceleration unit, 
the capacity of a RAM used for the calculations needs to be increased, 
and a program in the computer may run out of control . When the program 



runs out of control, operation control of the elevator also suffers 
an abnormality. This may damage components of the elevator. 

Disclosure of the Invention 

The present invention has been made to solve the problem 
described above. Therefore, it is an object of the present invention 
to obtain an elevator control apparatus which is capable of more 
reliably performing calculations regarding operation control by 
a computer and enhancing reliability. 

To this end, according to one aspect of the present invention, 
there is provided an elevator control apparatus, comprising: a RAM 
in which a stack region storing information required for calculations 
for controlling operation of an elevator is set; and a stack region 
surveillance portion that conducts surveillance of a state of a 
preset surveillance region within the stack region, wherein the 
elevator control apparatus controls operation of the elevator 
according to a state of the surveillance region detected by the 
stack region surveillance portion. 

Brief Description of the Drawings 

Fig. 1 is a schematic diagram showing an elevator apparatus 
according to Embodiment 1 of the present invention. 

Fig. 2 is a front view showing the safety device of Fig. 1. 

Fig. 3 is a front view showing the safety device of Fig. 2 
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that has been actuated. 

Fig. 4 is a schematic diagram showing an elevator apparatus 
according to Embodiment 2 of the present invention. 

Fig. 5 is a front view showing the safety device of Fig. 4. 

Fig. 6 is a front view showing the safety device of Fig. 5 
that has been actuated. 

Fig. 7 is a front view showing the drive portion of Fig. 6. 

Fig. 8 is a schematic diagram showing an elevator apparatus 
according to Embodiment 3 of the present invention. 

Fig. 9 is a schematic diagram showing an elevator apparatus 
according to Embodiment 4 of the present invention. 

Fig. 10 is a schematic diagram showing an elevator apparatus 
according to Embodiment 5 of the present invention. 

Fig. 11 is a schematic diagram showing an elevator apparatus 
according to Embodiment 6 of the present invention. 

Fig. 12 is a schematic diagram showing another example of the 
elevator apparatus shown in Fig. 11. 

Fig. 13 is a schematic diagram showing an elevator apparatus 
according to Embodiment 7 of the present invention. 

Fig. 14 is a schematic diagram showing an elevator apparatus 
according to Embodiment 8 of the present invention. 

Fig. 15 is a front view showing another example of the drive 
portion shown in Fig. 7. 

Fig. 16 is a plan view showing a safety device according to 



Embodiment 9 of the present invention. 

Fig . 17 is a partially cutaway side view showing a safety device 
according to Embodiment 10 of the present invention. 

Fig. 18 is a schematic diagram showing an elevator apparatus 
according to Embodiment 11 of the present invention. 

Fig. 19 is a graph showing the car speed abnormality 
determination criteria stored in the memory portion of Fig. 18. 

Fig. 20 is a graph showing the car acceleration abnormality 
determination criteria stored in the memory portion of Fig. 18. 

Fig. 21 is a schematic diagram showing an elevator apparatus 
according to Embodiment 12 of the present invention. 

Fig. 22 is a schematic diagram showing an elevator apparatus 
according to Embodiment 13 of the present invention. 

Fig. 23 is a diagram showing the rope fastening device and 
the rope sensors of Fig. 22. 

Fig. 24 is a diagram showing a state where one of the main 
ropes of Fig. 23 has broken. 

Fig. 25 is a schematic diagram showing an elevator apparatus 
according to Embodiment 14 of the present invention. 

Fig. 26 is a schematic diagram showing an elevator apparatus 
according to Embodiment 15 of the present invention. 

Fig. 27 is a perspective view of the car and the door sensor 
of Fig. 26. 

Fig. 28 is a perspective view showing a state in which the 



car entrance 26 of Fig. 27 is open. 

Fig. 29 is a schematic diagram showing an elevator apparatus 
according to Embodiment 16 of the present invention. 

Fig. 30 is a diagram showing an upper portion of the hoistway 
of Fig. 29. 

Fig . 31 is a block diagram showing an elevator control apparatus 
according to Embodiment 17 of the present invention. 

Fig. 32 is an explanatory view showing regional segmentation 
within a RAM shown in Fig . 31 . 

Fig. 33 is a flowchart showing an initial operation of the 
elevator control apparatus shown in Fig. 31. 

Fig. 34 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus shown in Fig. 31. 

Fig. 35 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 18 of 
the present invention. 

Fig. 36 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 19 of 
the present invention. 

Fig. 37 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 20 of 
the present invention. 

Fig. 38 is an explanatory view showing an example of data 
recorded through a history calculation shown in Fig. 37. 



Fig. 39 is a flowchart showing flow of a history calculation 
shown in Fig. 37. 

Fig. 40 is a schematic diagram showing an elevator apparatus 
according to Embodiment 21 of the present invention. 

Fig. 41 is a flowchart showing flow of interrupt calculations 
of an elevator control apparatus according to Embodiment 22 of the 
present invention . 

Best Modes for carrying out the Invention 

Hereinbelow, preferred embodiments of the present invention 
are described with reference to the drawings. 
Embodiment 1 

Fig. 1 is a schematic diagram showing an elevator apparatus 
according to Embodiment 1 of the present invention. Referring to 
Fig. 1, a pair of car guide rails 2 are arranged within a hoistway 
1. A car 3 is guided by the car guide rails 2 as it is raised and 
lowered in the hoistway 1. Arranged at the upper end portion of 
the hoistway 1 is a hoisting machine (not shown) for raising and 
lowering the car 3 and a counterweight (not shown) . A main rope 

4 is wound around a drive sheave of the hoisting machine. The car 
3 and the counterweight are suspended in the hoistway 1 by means 
of the main rope 4 . Mounted to the car 3 are a pair of safety devices 

5 opposed to the respective guide rails 2 and serving as braking 
means. The safety devices 5 are arranged on the underside of the 



car 3. Braking is applied to the car 3 upon actuating the safety 
devices 5. 

Also arranged at the upper end portion of the hoistway 1 is 
a governor 6 serving as a car speed detecting means for detecting 
the ascending/descending speed of the car 3. The governor 6 has 
a governor main body 7 and a governor sheave 8 rotatable with respect 
to the governor main body 7 . A rotatable tension pulley 9 is arranged 
at a lower end portion of the hoistway 1 . Wound between the governor 
sheave 8 and the tension pulley 9 is a governor rope 10 connected 
to the car 3. The connecting portion between the governor rope 10 
and the car 3 undergoes vertical reciprocating motion as the car 
3 travels . As a result , the governor sheave 8 and the tension pulley 
9 are rotated at a speed corresponding to the ascending/descending 
speed of the car 3 . 

The governor 6 is adapted to actuate a braking device of the 
hoisting machine when the ascending/descending speed of the car 
3 has reached a preset first overspeed. Further, the governor 6 
is provided with a switch portion 11 serving as an output portion 
through which an actuation signal is output to the safety devices 
5 when the descending speed of the car 3 reaches a second overspeed 
(set overspeed) higher than the first overspeed. The switch portion 
11 has a contact 16 which is mechanically opened and closed by means 
of an overspeed lever that is displaced according to the centrifugal 
force of the rotating governor sheave 8. The contact 16 is 



electrically connected to a battery 12, which is an uninterruptible 
power supply capable of feeding power even in the event of a power 
failure, and to a control panel 13 that controls the drive of an 
elevator, through a power supply cable 14 and a connection cable 
15, respectively. 

A control cable (movable cable) is connected between the car 
3 and the control panel 13. The control cable includes, in addition 
to multiple power lines and signal lines, an emergency stop wiring 

17 electrically connected between the control panel 13 and each 
safety device 5 . By closing of the contact 16, power from the battery 
12 is supplied to each safety device 5 by way of the power supply 
cable 14, the switch portion 11, the connection cable 15, a power 
supply circuit within the control panel 13, and the emergency stop 
wiring 17. It should be noted that transmission means consists of 
the connection cable 15, the power supply circuit within the control 
panel 13, and the emergency stop wiring 17. 

Fig. 2 is a front view showing the safety device 5 of Fig. 
1, and Fig. 3 is a front view showing the safety device 5 of Fig. 
2 that has been actuated. Referring to the figures, a support member 

18 is fixed in position below the car 3. The safety device 5 is 
fixed to the support member 18. Further, each safety device 5 
includes a pair of actuator portions 20, which are connected to 
a pair of wedges 19 serving as braking members and capable of moving 
into and away from contact with the car guide rail 2 to displace 
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the wedges 19 with respect to the car 3, and a pair of guide portions 
21 which are fixed to the support member 18 and guide the wedges 
19 displaced by the actuator portions 20 into contact with the car 
guide rail 2. The pair of wedges 19, the pair of actuator portions 
20, and the pair of guide portions 21 are each arranged symmetrically 
on both sides of the car guide rail 2. 

Each guide portion 21 has an inclined surface 22 inclined with 
respect to the car guide rail 2 such that the distance between it 
and the car guide rail 2 decreases with increasing proximity to 
its upper portion. The wedge 19 is displaced along the inclined 
surface 22. Each actuator portion 20 includes a spring 23 serving 
as an urging portion that urges the wedge 19 upward toward the guide 
portion 21 side, and an electromagnet 24 which, when supplied with 
electric current, generates an electromagnetic force for displacing 
the wedge 19 downward away from the guide member 21 against the 
urging force of the spring 23. 

The spring 23 is connected between the support member 18 and 
the wedge 19. The electromagnet 24 is fixed to the support member 
18. The emergency stop wiring 17 is connected to the electromagnet 
24. Fixed to each wedge 19 is a permanent magnet 25 opposed to the 
electromagnet 24. The supply of electric current to the 
electromagnet 24 is performed from the battery 12 (see Fig. 1) by 
the closing of the contact 16 (see Fig. 1) . The safety device 5 
is actuated as the supply of electric current to the electromagnet 
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24 is cut off by the opening of the contact 16 (see Fig. 1) . That 
is, the pair of wedges 19 are displaced upward due to the elastic 
restoring force of the spring 23 to be pressed against the car guide 
rail 2. 

Next, operation is described. The contact 16 remains closed 
during normal operation. Accordingly, power is supplied from the 
battery 12 to the electromagnet 24. The wedge 19 is attracted and 
held onto the electromagnet 24 by the electromagnetic force generated 
upon this power supply, and thus remains separated from the car 
guide rail 2 (Fig. 2). 

When, for instance, the speed of the car 3 rises to reach the 
first overspeed due to a break in the main rope 4 or the like, this 
actuates the braking device of the hoisting machine . When the speed 
of the car 3 rises further even after the actuation of the braking 
device of the hoisting machine and reaches the second overspeed, 
this triggers closure of the contact 16. As a result, the supply 
of electric current to the electromagnet 24 of each safety device 
5 is cut off, and the wedges 19 are displaced by the urging force 
of the springs 23 upward with respect to the car 3. At this time, 
the wedges 19 are displaced along the inclined surface 22 while 
in contact with the inclined surface 22 of the guide portions 21. 
Due to this displacement, the wedges 19 are pressed into contact 
with the car guide rail 2 . The wedges 19 are displaced further upward 
as they come into contact with the car guide rail 2, to become wedged 



in between the car guide rail 2 and the guide portions 21. A large 
frictional force is thus generated between the car guide rail 2 
and the wedges 19, braking the car 3 (Fig. 3) . 

To release the braking on the car 3, the car 3 is raised while 
supplying electric current to the electromagnet 24 by the closing 
of the contact 16. As a result, the wedges 19 are displaced downward, 
thus separating from the car guide rail 2. 

In the above-described elevator apparatus, the switch portion 
11 connected to the battery 12 and each safety device 5 are 
electrically connected to each other, whereby an abnormality in 
the speed of the car 3 detected by the governor 6 can be transmitted 
as an electrical actuation signal from the switch portion 11 to 
each safety device 5, making it possible to brake the car 3 in a 
short time after detecting an abnormality in the speed of the car 
3. As a result, the braking distance of the car 3 can be reduced. 
Further, synchronized actuation of the respective safety devices 
5 can be readily effected, making it possible to stop the car 3 
in a stable manner. Also, each safety device 5 is actuated by the 
electrical actuation signal, thus preventing the safety device 5 
from being erroneously actuated due to shaking of the car 3 or the 
like. 

Additionally, each safety device 5 has the actuator portions 
20 which displace the wedge 19 upward toward the guide portion 21 
side, and the guide portions 21 each including the inclined surface 



22 to guide the upwardly displaced wedge 19 into contact with the 
car guide rail 2, whereby the force with which the wedge 19 is pressed 
against the car guide rail 2 during descending movement of the car 
3 can be increased with reliability. 

Further, each actuator portion 20 has a spring 23 that urges 
the wedge 19 upward, and an electromagnet 24 for displacing the 
wedge 19 downward against the urging force of the spring 23, thereby 
enabling displacement of the wedge 19 by means of a simple 
construction . 

Embodiment 2 

Fig. 4 is a schematic diagram showing an elevator apparatus 
according to Embodiment 2 of the present invention. Referring to 
Fig. 4, the car 3 has a car main body 27 provided with a car entrance 
26, and a car door 28 that opens and closes the car entrance 26. 
Provided in the hoistway 1 is a car speed sensor 31 serving as car 
speed detecting means for detecting the speed of the car 3. Mounted 
inside the control panel 13 is an output portion 32 electrically 
connected to the car speed sensor 31. The battery 12 is connected 
to the output portion 32 through the power supply cable 14 . Electric 
power used for detecting the speed of the car 3 is supplied from 
the output portion 32 to the car speed sensor 31 . The output portion 
32 is input with a speed detection signal from the car speed sensor 
31. 
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Mounted on the underside of the car 3 are a pair of safety 
devices 33 serving as braking means for braking the car 3 . The output 
portion 32 and each safety device 33 are electrically connected 
to each other through the emergency stop wiring 17. When the speed 
of the car 3 is at the second overspeed, an actuation signal, which 
is the actuating power, is output to each safety device 33. The 
safety devices 33 are actuated upon input of this actuation signal. 

Fig. 5 is a front view showing the safety device 33 of Fig. 
4, and Fig. 6 is a front view showing the safety device 33 of Fig. 
5 that has been actuated. Referring to the figures, the safety device 
33 has a wedge 34 serving as a braking member and capable of moving 
into and away from contact with the car guide rail 2, an actuator 
portion 35 connected to a lower portion of the wedge 34, and a guide 
portion 36 arranged above the wedge 34 and fixed to the car 3. The 
wedge 34 and the actuator portion 35 are capable of vertical movement 
with respect to the guide portion 36. As the wedge 34 is displaced 
upward with respect to the guide portion 36, that is, toward the 
guide portion 36 side, the wedge 34 is guided by the guide portion 

36 into contact with the car guide rail 2. 

The actuator portion 35 has a cylindrical contact . portion 37 
capable of moving into and away from contact with the car guide 
rail 2, an actuating mechanism 38 for displacing the contact portion 

37 into and away from contact with the car guide rail 2, and a support 
portion 39 supporting the contact portion 37 and the actuating 



mechanism 38. The contact portion 37 is lighter than the wedge 34 
so that it can be readily displaced by the actuating mechanism 38. 
The actuating mechanism .38 has a movable portion 40 capable of 
reciprocating displacement between a contact position where the 
contact portion 37 is held in contact with the car guide rail 2 
and a separated position where the contact portion 37 is separated 
from the car guide rail 2, and a drive portion 41 for displacing 
the movable portion 40. 

The support portion 39 and the movable portion 40 are provided 
with a support guide hole 4 2 and a movable guide hole 43, respectively. 
The inclination angles of the support guide hole 42 and the movable 
guide hole 43 with respect to the car guide rail 2 are different 
from each other. The contact portion 37 is slidably fitted in the 
support guide hole 42 and the movable guide hole 43. The contact 
portion 37 slides within the movable guide hole 43 according to 
the reciprocating displacement of the movable portion 40, and is 
displaced along the longitudinal direction of the support guide 
hole 42. As a result, the contact portion 37 is moved into and away 
from contact with the car guide rail 2 at an appropriate angle. 
When the contact portion 37 comes into contact with the car guide 
rail 2 as the car 3 descends, braking is applied to the wedge 34 
and the actuator portion 35, displacing them toward the guide portion 
36 side. 

Mounted on the upperside of the support portion 39 is a 



horizontal guide hole 47 extending in the horizontal direction. 
The wedge 34 is slidably fitted in the horizontal guide hole 47. 
That is, the wedge 34 is capable of reciprocating displacement in 
the horizontal direction with respect to the support portion 39. 

The guide portion 36 has an inclined surface 44 and a contact 
surface 45 which are arranged so as to sandwich the car guide rail 
2 therebetween. The inclined surface 44 is inclined with respect 
to the car guide rail 2 such that the distance between it and the 
car guide rail 2 decreases with increasing proximity to its upper 
portion. The contact surface 45 is capable of moving into and away 
from contact with the car guide rail 2. As the wedge 34 and the 
actuator portion 35 are displaced upward with respect to the guide 
portion 36, the wedge 34 is displaced along the inclined surface 
44 . As a result, the wedge 34 and the contact surface 45 are displaced 
so as to approach each other, and the car guide rail 2 becomes lodged 
between the wedge 34 and the contact surface 45. 

Fig. 7 is a front view showing the drive portion 41 of Fig. 
6. Referring to Fig. 7, the drive portion 41 has a disc spring 46 
serving as an urging portion and attached to the movable portion 
40, and an electromagnet 48 for displacing the movable portion 40 
by an electromagnetic force generated upon supply of electric current 
thereto . 

The movable portion 40 is fixed to the central portion of the 
disc spring 46. The disc spring 46 is deformed due to the 



reciprocating displacement of the movable portion 40. As the disc 
spring 4 6 is deformed due to the displacement of the movable portion 
40, the urging direction of the disc spring 46 is reversed between 
the contact position (solid line) and the separated position (broken 
line) . The movable portion 4 0 is retained at the contact or separated 
position as it is urged by the disc spring 46. That is, the contact 
or separated state of the contact portion 37 with respect to the 
car guide rail 2 is retained by the urging of the disc spring 46. 

The electromagnet 48 has a first electromagnetic portion 49 
fixed to the movable portion 40, and a second electromagnetic portion 
50 opposed to the first electromagnetic portion 49. The movable 
portion 40 is displaceable relative to the second electromagnetic 
portion 50. The emergency stop wiring 17 is connected to the 
electromagnet 48. Upon inputting an actuation signal to the 
electromagnet 48, the first electromagnetic port ion 49 and the second 
electromagnetic portion 50 generate electromagnetic forces so as 
to repel each other. That is, upon input of the actuation signal 
to the electromagnet 48, the first electromagnetic portion 49 is 
displaced away from contact with the second electromagnetic portion 
50, together with the movable portion 40. 

It should be noted that for recovery after the actuation of 
the safety device 5, the output portion 32 outputs a recovery signal 
during the recovery phase. Input of the recovery signal to the 
electromagnet 48 causes the first electromagnetic portion 4 9 and 



the second electromagnetic portion 50 to attract each other. 
Otherwise, this embodiment is of the same construction as Embodiment 
1. 

Next, operation is described. During normal operation, the 
movable portion 40 is located at the separated position, and the 
contact portion 37 is urged by the disc spring 46 to be separated 
away from contact with the car guide rail 2 . With the contact portion 
37 thus being separated from the car guide rail 2, the wedge 34 
is separated from the guide portion 36, thus maintaining the distance 
between the wedge 34 and the guide portion 36. 

When the speed detected by the car speed sensor 31 reaches 
the first overspeed, this actuates the braking device of the hoisting 
machine. When the speed of the car 3 continues to rise thereafter 
and the speed as detected by the car speed sensor 31 reaches the 
second overspeed, an actuation signal is output from the output 
portion 32 to each safety device 33 . Inputting this actuation signal 
to the electromagnet 48 triggers the first electromagnetic portion 
49 and the second electromagnetic portion 50 to repel each other. 
The electromagnetic repulsion force thus generated causes the 
movable portion 40 to be displaced into the contact position. As 
this happens, the contact portion 37 is displaced into contact with 
the car guide rail 2. By the time the movable portion 40 reaches 
the contact position, the urging direction of the disc spring 46 
reverses to that for retaining the movable portion 40 at the contact 



position. As a result, the contact portion 37 is pressed into contact 
with the car guide rail 2, thus braking the wedge 34 and the actuator 
portion 35. 

Since the car 3 and the guide portion 36 descend with no braking 
applied thereon, the guide portion 36 is displaced downward towards 
the wedge 34 and actuator 35 side. Due to this displacement, the 
wedge 34 is guided along the inclined surface 44, causing the car 
guide rail 2 to become lodged between the wedge 34 and the contact 
surface 45. As the wedge 34 comes into contact with the car guide 
rail 2, it is displaced further upward to wedge in between the car 
guide rail 2 and the inclined surface 44. A large frictional force 
is thus generated between the car guide rail 2 and the wedge 34, 
and between the car guide rail 2 and the contact surface 45, thus 
braking the car 3. 

During the recovery phase, the recovery signal is transmitted 
from the output portion 32 to the electromagnet 48. This causes 
the first electromagnetic portion 49 and the second electromagnetic 
portion 50 to attract each other, thus displacing the movable portion 
40 to the separated position. As this happens, the contact portion 
37 is displaced to be separated away from contact with the car guide 
rail 2. By the time the movable portion 40 reaches the separated 
position, the urging direction of the disc spring 46 reverses, 
allowing the. movable portion 40 to be retained at the separated 
position. As the car 3 ascends in this state, the pressing contact 
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of the wedge 34 and the contact surface 45 with the car guide rail 
2 is released. 

In addition to providing the same effects as those of Embodiment 
1, the above-described elevator apparatus includes the car speed 
sensor 31 provided in the hoistway 1 to detect the speed of the 
car 3 . There is thereby no need to use a speed governor and a governor 
rope, making it possible to reduce the overall installation space 
for the elevator apparatus. 

Further, the actuator portion 35 has the contact portion 37 
capable of moving into and away from contact with the car guide 
rail 2, and the actuating mechanism 38 for displacing the contact 
portion 37 into and away from contact with the car guide rail 2. 
Accordingly, by making the weight of the contact portion 37 smaller 
than that of the wedge 34, the drive force to be applied from the 
actuating mechanism 38 to the contact portion 37 can be reduced, 
thus making it possible to miniaturize the actuating mechanism 38. 
Further, the lightweight construction of the contact portion 37 
allows increases in the displacement rate of the contact portion 
37, thereby reducing the time required until generation of a braking 
force . 

Further, the drive portion 41 includes the disc spring 46 
adapted to hold the movable portion 40 at the contact position or 
the separated position, and the electromagnet 48 capable of 
displacing the movable portion 4 0 when supplied with electric current , 



whereby the movable portion 40 can be reliably held at the contact 
or separated position by supplying electric current to the 
electromagnet 4 8 only during the displacement of the movable portion 
40. 

Embodiment 3 

Fig. 8 is a schematic diagram showing an elevator apparatus 
according to Embodiment 3 of the present invention. Referring to 
Fig. 8, provided at the car entrance 26 is a door closed sensor 
58, which serves as a door closed detecting means for detecting 
the open or closed state of the car door 28. An output portion 59 
mounted on the control panel 13 is connected to the door closed 
sensor 58 through a control cable. Further, the car speed sensor 
31 is electrically connected to the output portion 59. A speed 
detection signal from the car speed sensor 31 and an open/closed 
detection signal from the door closed sensor 58 are input to the 
output portion 59. On the basis of the speed detection signal and 
the open/closed detection signal thus input, the output portion 
59 can determine the speed of the car 3 and the open or closed state 
of the car entrance 26. 

The output portion 59 is connected to each safety device 33 
through the emergency stop wiring 17. On the basis of the speed 
detection signal from the car speed sensor 31 and the opening/closing 
detection signal from the door closed sensor 58, the output portion 



59 outputs an actuation signal when the car 3 has descended with 
the car entrance 26 being open. The actuation signal is transmitted 
to the safety device 33 through the emergency stop wiring 17 . 
Otherwise, this embodiment is of the same construction as Embodiment 
2. 

In the elevator apparatus as described above, the car speed 
sensor 31 that detects the speed of the car 3, and the door closed 
sensor 58 that detects the open or closed state of the car door 
28 are electrically connected to the output portion 59, and the 
actuation signal is output from the output portion 59 to the safety 
device 33 when the car 3 has descended with the car entrance 26 
being open, thereby preventing the car 3 from descending with the 
car entrance 26 being open. 

It should be noted that safety devices vertically reversed 
from the safety devices 33 may be mounted to the car 3. This 
construction also makes it possible to prevent the car 3 from ascending 
with the car entrance 26 being open. 

Embodiment 4 

Fig. 9 is a schematic diagram showing an elevator apparatus 
according to Embodiment 4 of the present invention. Referring to 
Fig. 9, passed through the main rope 4 is a break detection lead 
wire 61 serving as a rope break detecting means for detecting a 
break in the rope 4 . A weak current flows through the break detection 



lead wire 61. The presence of a break in the main rope 4 is detected 
on the basis of the presence or absence of this weak electric current 
passing therethough. An output portion 62 mounted on the control 
panel 13 is electrically connected to the break detection lead wire 
61 . When the break detection lead wire 61 breaks, a rope break signal, 
which is an electric current cut-off signal of the break detection 
lead wire 61, is input to the output portion 62 . The car speed sensor 
31 is also electrically connected to the output portion 62. 

The output portion 62 is connected to each safety device 33 
through the emergency stop wiring 17. If the main rope 4 breaks, 
the output portion 62 outputs an actuation signal on the basis of 
the speed detection signal from the car speed sensor 31 and the 
rope break signal from the break detection lead wire 61. The 
actuation signal is transmitted to the safety device 33 through 
the emergency stop wiring 17 . Otherwise, this embodiment is of the 
same construction as Embodiment 2. 

In the elevator apparatus as described above, the car speed 
sensor 31 which detects the speed of the car 3 and the break detection 
lead wire 61 which detects a break in the main rope 4 are electrically 
connected to the output portion 62, and, when the main rope 4 breaks, 
the actuation signal is output from the output portion 62 to the 
safety device 33. By thus detecting the speed of the car 3 and 
detecting a break in the main rope 4, braking can be more reliably 
applied to a car 3 that is descending at abnormal speed. 



While in the above example the method of detecting the presence 
or absence of an electric current passing through the break detection 
lead wire 61, which is passed through the main rope 4, is employed 
as the rope break detecting means, it is also possible to employ 
a method of, for example, measuring changes in the tension of the 
main rope 4. In this case, a tension measuring instrument is 
installed on the rope fastening. 

Embodiment 5 

Fig. 10 is a schematic diagram showing an elevator apparatus 
according to Embodiment 5 of the present invention. Referring to 
Fig. 10, provided in the hoistway 1 is a car position sensor 65 
serving as car position detecting means for detecting the position 
of the car 3. The car position sensor 65 and the car speed sensor 
31 are electrically connected to an output portion 66 mounted on 
the control panel 13. The output portion 66 has a memory portion 
67 storing a control pattern containing information on the position, 
speed, acceleration/deceleration, floor stops, etc., of the car 
3 during normal operation. Inputs to the output portion 66 are a 
speed detection signal from the car speed sensor 31 and a car position 
signal from the car position sensor 65. 

The output portion 66 is connected to the safety device 33 
through the emergency stop wiring 17 . The output portion 66 compares 
the speed and position (actual measured values) of the car 3 based 



on the speed detection signal and the car position signal with the 
speed and position (set values) of the car 3 based on the control 
pattern stored in the memory portion 67 . The output portion 66 
outputs an actuation signal to the safety device 33 when the deviation 
between the actual measured values and the set values exceeds a 
predetermined threshold. Herein, the predetermined threshold 
refers to the minimum deviation between the actual measurement values 
and the set values required for bringing the car 3 to a halt through 
normal braking without the car 3 colliding against an end portion 
of the hoistway 1. Otherwise,, this embodiment is of the same 
construction as Embodiment. 2 . 

In the elevator apparatus as described above, the output 
portion 66 outputs the actuation signal when the deviation between 
the actual measurement values from each of the car speed sensor 
31 and the car position sensor 65 and the set values based on the 
control pattern exceeds the predetermined threshold, making it 
possible to prevent collision of the car 3 against the end portion 
of the hoistway 1. 

Embodiment 6 

Fig. 11 is a schematic diagram showing an elevator apparatus 
according to Embodiment 6 of the present invention. Referring to 
Fig. 11, arranged within the hoistway 1 are an upper car 71 that 
is a first car and a lower car 72 that is a second car located below 
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the upper car 71. The upper car 71 and the lower car 72 are guided 
by the car guide rail 2 as they ascend and descend in the hoistway 
1. Installed at the upper end portion of the hoistway 1 are a first 
hoisting machine (not shown) for raising and lowering the upper 
car 71 and an upper-car counterweight (not shown) , and a second 
hoisting machine (not shown) for raising and lowering the lower 
car 72 and a lower-car counterweight (not shown) . A first main rope 
(not shown) is wound around the drive sheave of the first hoisting 
machine, and a second main rope (not shown) is wound around the 
drive sheave of the second hoisting machine. The upper car 71 and 
the upper-car counterweight are suspended by the first main rope, 
and the lower car 72 and the lower-car counterweight are suspended 
by the second main rope. 

In the hoistway 1 , there are provided an upper-car speed sensor 
73 and a lower-car speed sensor 74 respectively serving as car speed 
detecting means for detecting the speed of the upper car 71 and 
the speed of the lower car 72. Also provided in the hoistway 1 are 
an upper-car position sensor 75 and a lower-car position sensor 
7 6 respectively serving as car position detecting means for detecting 
the position of the upper car 71 and the position of the lower car 
72. 

It should be noted that car operation detecting means includes 
the upper-car speed sensor 73, the lower-car sped sensor 74, the 
upper-car position sensor 75, and the lower-car position sensor 



76. 

Mounted on the underside of the upper car 71 are upper-car 
safety devices 77 serving as braking means of the same construction 
as that of the safety devices 33 used in Embodiment 2. Mounted on 
the underside of the lower car 72 are lower-car safety devices 78 
serving as braking means of the same construction as that of the 
upper-car safety devices 77. 

An output portion 79 is mounted inside the control panel 13. 
The upper-car speed sensor 73, the lower-car speed sensor 74, the 
upper-car position sensor 75, and the lower-car position sensor 
76 are electrically connected to the output portion 79. Further, 
the battery 12 is connected to the output portion 79 through the 
power supply cable 14. An upper-car speed detection signal from 
the upper-car speed sensor 73, a lower-car speed detection signal 
from the lower-car speed sensor 74, an upper-car position detecting 
signal from the upper-car position sensor 75, and a lower-car position 
detection signal from the lower-car position sensor 7 6 are input 
to the output portion 7 9 . That is , information from the car operation 
detecting means is input to the output portion 79. 

The output portion 79 is connected to the upper-car safety 
device 77 and the lower-car safety device 78 through the emergency 
stop wiring 17. Further, on the basis of the information from the 
car operation detecting means , the output portion 79 predicts whether 
or not the upper car 71 or the lower car 72 will collide against 
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an end portion of the hoistway 1 and whether or not collision will 
occur between the upper car 71 and the lower car 72; when it is 
predicted that such collision will occur, the output portion 7 9 
outputs an actuation signal to each the upper-car safety devices 
77 and the lower-car safety devices 78 . The upper-car safety devices 
77 and the lower-car safety devices 78 are each actuated upon input 
of this actuation signal. 

It should be noted that a monitoring portion includes the car 
operation detecting means and the output portion 79. The running 
states of the upper car 71 and the lower car 72 are monitored by 
the monitoring portion. Otherwise, this embodiment is of the same 
construction as Embodiment 2. 

Next, operation is described. When input with the information 
from the car operation detecting means , the output portion 7 9 predicts 
whether or not the upper car 71 and the lower car 72 will collide 
against an end portion of the hoistway 1 and whether or not collision 
between the upper car and the lower car 72 will occur. For example, 
when the output portion 79 predicts that collision will occur between 
the upper car 71 and the lower car 72 due to a break in the first 
main rope suspending the upper car 71, the output portion 79 outputs 
an actuation signal to each the upper-car safety devices 77 and 
the lower-car safety devices 78. The upper-car safety devices 77 
and the lower-car safety devices 78 are thus actuated, braking the 
upper car 71 and the lower car 72. 



In the elevator apparatus as described above, the monitoring 
portion has the car operation detecting means for detecting the 
actual movements of the upper car 71 and the lower car 72 as they 
ascend and descend in the same hoistway 1, and the output portion 
79 which predicts whether or not collision will occur between the 
upper car 71 and the lower car 72 on the basis of the information 
from the car operation detecting means and, when it is predicted 
that the collision will occur, outputs the actuation signal to each 
of the upper-car safety devices 77 and the lower-car emergency devices 
78. Accordingly, even when the respective speeds of the upper car 
71 and the lower car 72 have not reached the set overspeed, the 
upper-car safety devices 77 and the lower-car emergency devices 
78 can be actuated when it is predicted that collision will occur 
between the upper car 71 and the lower car 72, thereby making it 
possible to avoid a collision between the upper car 71 and the lower 
car 72. 

Further, the car operation detecting means has the upper-car 
speed sensor 7 3 , the lower-car speed sensor 74 , the upper-car position 
sensor 75, and the lower-car position sensor 7 6, the actual movements 
of the upper car 71 and the lower car 72 can be readily detected 
by means of a simple construction. 

While in the above-described example the output portion 79 . 
is mounted inside the control panel 13, an output portion 79 may 
be mounted on each of the upper car 71 and the lower car 72. In 
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this case, as shown in Fig. 12, the upper-car speed sensor 73, the 
lower-car speed sensor 74, the upper-car position sensor 75, and 
the lower-car position sensor 76 are electrically connected to each 
of the output portions 79 mounted on the upper car 71 and the lower 
car 72. 

While in the above-described example the output portions 79 
outputs the actuation signal to each the upper-car safety devices 
77 and the lower-car safety devices 78, the output portion 79 may, 
in accordance with the information from the car operation detecting 
means, output the actuation signal to only one of the upper-car 
safety device 77 and the lower-car safety device 78. In this case, 
in addition to predicting whether or not collision will occur between 
the upper car 71 and the lower car 72, the output portions 79 also 
determine the presence of an abnormality in the respective movements 
of the upper car 71 and the lower car 72. The actuation signal is 
output from an output portion 79 to only the safety device 1 mounted 
on the car which is moving abnormally. 

Embodiment 7 

Fig. 13 is a schematic diagram showing an elevator apparatus 
according to Embodiment 7 of the present invention. Referring to 
Fig. 13, an upper-car output portion 81 serving as an output portion 
is mounted on the upper car 71, and a lower-car output portion 82 
serving as an output portion is mounted on the lower car 72. The 



upper-car speed sensor 73, the upper-car position sensor 75, and 
the lower-car position sensor 76 are electrically connected to the 
upper-car output portion 81. The lower-car speed sensor 74, the 
lower-car position sensor 76, and the upper-car position sensor 
75 are electrically connected to the lower-car output portion 82. 

The upper-car output portion 81 is electrically connected to 
the upper-car safety devices 77 through an upper-car emergency stop 
wiring 83 serving as transmission means installed on the upper car 

71. Further, the upper-car output port ion 8 1 predict s , on the basis 
of information (hereinafter referred to as "upper-car detection 
information" in this embodiment) from the upper-car speed sensor 
73, the upper-car position sensor 75, and the lower-car position 
sensor 76, whether or not the upper car 71 will collide against 
the lower car 72, and outputs an actuation signal to the upper-car 
safety devices 77 upon predicting that a collision . will occur. 
Further, when input with the upper-car detection information, the 
upper-car output portion 81 predicts whether or not the upper car 
71 will collide against the lower car 72 on the assumption that 
the lower car 72 is running toward the upper car 71 at its maximum 
normal operation speed. 

The lower-car output portion 82 is electrically connected to 
the lower-car safety devices 78 through a lower-car emergency stop 
wiring 84 serving as transmission means installed on the lower car 

72. Further, the lower-car output portion 82 predicts, on the basis 
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of information (hereinafter referred to as "lower-car detection 
information" in this embodiment) from the lower-car speed sensor 
74, the lower-car position sensor 76, and the upper-car position 
sensor 75, whether or not the lower car 72 will collide against 
the upper car 71, and outputs an actuation signal to the lower-car 
safety devices 78 upon predicting that a collision will occur. 
Further, when input with the lower-car detection information, the 
lower-car output portion 82 predicts whether or not the lower car 
72 will collide against the upper car 71 on the assumption that 
the upper car 71 is running toward the lower car 72 at its maximum 
normal operation speed. 

Normally, the operations of the upper car 71 and the lower 
car 72 are controlled such that they are sufficiently spaced away 
from each other so that the upper-car safety devices 77 and the 
lower-car safety devices 78 do not actuate. Otherwise, this 
embodiment is of the same construction as Embodiment 6. 

Next, operation is described. For instance, when, due to a 
break in the first main rope suspending the upper car 71, the upper 
car 71 falls toward the lower car 72, the upper-car output portion 

81 and the lower-car output portion 82 both predict the impending 
collision between the upper car 71 and the lower car 72 . As a result, 
the upper-car output portion 81 and the lower-car output portion 

82 each output an actuation signal to the upper-car safety devices 
77 and the lower-car safety devices 78, respectively. This actuates 



the upper-car safety devices 77 and the lower-car safety devices 
78, thus braking the upper car 71 and the lower car 72. 

In addition to providing the same effects as those of Embodiment 
6, the above-described elevator apparatus, in which the upper-car 
speed sensor 73 is electrically connected to only the upper-car 
output portion 81 and the lower-car speed sensor 74 is electrically 
connected to only the lower-car output portion 82, obviates the 
need to provide electrical wiring between the upper-car speed sensor 
73 and the lower-car output portion 82 and between the lower-car 
speed sensor 7 4 and the upper-car output portion 8 1 , making it possible 
to simplify the electrical wiring installation. 

Embodiment 8 

Fig. 14 is a schematic diagram showing an elevator apparatus 
according to Embodiment 8 of the present invention. Referring to 
Fig. 14, mounted to the upper car 71 and the lower car 72 is an 
inter-car distance sensor 91 serving as inter-car distance detecting 
means for detecting the distance between the upper car 71 and the 
lower car 72. The inter-car distance sensor 91 includes a laser 
irradiation portion mounted on the upper car 71 and a reflection 
portion mounted on the lower car 72 . The distance between the upper 
car 71 and the lower car 72 is obtained by the inter-car distance 
sensor 91 based on the reciprocation time of laser light between 
the laser irradiation portion and the reflection portion. 
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The upper-car speed sensor 73, the lower-car speed sensor 74, 
the upper-car position sensor 75, and the inter-car distance sensor 
91 are electrically connected to the upper-car output portion 81. 
The upper-car speed sensor 73, the lower-car speed sensor 74, the 
lower-car position sensor 76, and the inter-car distance sensor 
91 are electrically connected to the lower-car output portion 82. 

The upper-car output portion 81 predicts, on the basis of 
information (hereinafter referred to as "upper-car detection 
information" in this embodiment) from the upper-car speed sensor 
73, the lower-car speed sensor 74, the upper-car position sensor 

75, and the inter-car distance sensor 91, whether or not the upper 
car 71 will collide against the lower car 72, and outputs an actuation 
signal to the upper-car safety devices 77 upon predicting that a 
collision will occur. 

The lower-car output portion 82 predicts, on the basis of 
information (hereinafter referred to as "lower-car detection 
information" in this embodiment) from the upper-car speed sensor 
73, the lower-car speed sensor 74, the lower-car position sensor 

76, and the inter-car distance sensor 91, whether or not the lower 
car 72 will collide against the upper car 71, and outputs an actuation 
signal to the lower-car safety device 78 upon predicting that a 
collision will occur. Otherwise, this embodiment is of the same 
construction as Embodiment 7 . 

In the elevator apparatus as described above, the output 



portion 79 predicts whether or not a collision will occur between 
the upper car 71 and the lower car 72 based on the information from 
the inter-car distance sensor 91, making it possible to predict 
with improved reliability whether or not a collision will occur 
between the upper car 71 and the lower car 72. 

It should be noted that the door closed sensor 58 of Embodiment 
3 may be applied to the elevator apparatus as described in Embodiments 
6 through 8 so that the output portion is input with the open/closed 
detection signal. It is also possible to apply the break detection 
lead wire 61 of Embodiment 4 here as well so that the output portion 
is input with the rope break signal. 

While. the drive portion in Embodiments 2 through 8 described 
above is driven by utilizing the electromagnetic repulsion force 
or the electromagnetic attraction force between the first 
electromagnetic portion 49 and the second electromagnetic portion 
50, the drive portion may be driven by utilizing, for example, an 
eddy current generated in a conductive repulsion plate. In this 
case, as shown in Fig . 15, a pulsed current is supplied as an actuation 
signal to the electromagnet 4 8 , and the movable portion 4 0 is displaced 
through the interaction between an eddy current generated in a 
repulsion plate 51 fixed to the movable portion 40 and the magnetic 
field from the electromagnet 48. 

While in Embodiments 2 through 8 described above the car speed 
detecting means is provided in the hoistway 1, it may also be mounted 



on the car. In this case, the speed detection signal from the car 
speed detecting means is transmitted to the output portion through 
the control cable . 

Embodiment 9 

Fig. 16 is a plan view showing a safety device according to 
Embodiment 9 of the present invention. Here, a safety device 155 
has the wedge 34, an actuator portion 156 connected to a lower portion 
of the wedge 34, and the guide portion 36 arranged above the wedge 
34 and fixed to the car 3. The actuator portion 156 is vertically 
movable with respect to the guide portion 36 together with the wedge 
34 . 

The actuator portion 156 has a pair of contact portions 157 
capable of moving into and away from contact with the car guide 
rail 2, a pair of link members 158a, 158b each connected to one 
of the contact portions 157 , an actuating mechanism 15 9 for displacing 
the link member 158a relative to the other link member 158b such 
that the respective contact portions 157 move into and away from 
contact with the car guide rail 2 , and a support portion 160 supporting 
the contact portions 157, the link members 158a, 158b, - and the 
actuating mechanism 159. A horizontal shaft 170, which passes 
through the wedge 34, is fixed to the support portion 160. The wedge 
34 is capable of reciprocating displacement in the horizontal 
direction with respect to the horizontal shaft 170. 
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The link members 158 a , 158b cross each other at a portion between 
one end to the other end portion thereof. Further, provided to the 
support portion 160 is a connection member 161 which pivotably 
connects the link member 158a, 158b together at the portion where 
the link members 158a, 158b cross each other. Further, the link 
member 158a is provided so as to be pivotable with respect to the 
other link member 158b about the connection member 161. 

As the respective other end portions of the link member 158a, 
158b are displaced so as to approach each other, each contact portion 
157 is displaced into contact with the car guide rail 2. Likewise, 
as the respective other end portions of the link member 158a, 158b 
are displaced so as to separate away from each other, each contact 
portion 157 is displaced away from the car guide rail 2. 

The actuating mechanism 159 is arranged between the respective 
other end portions of the link members 158a, 158b. Further, the 
actuating mechanism 159 is supported by each of the link members 
158a, 158b. Further, the actuating mechanism 159 includes a rod-like 
movable portion 162 connected to the link member 158a, and a drive 
portion 163 fixed to the other link member 158b and adapted to displace 
the movable portion 162 in a reciprocating manner. The actuating 
mechanism 159 is pivotable about the connection member 161 together 
with the link members 158a, 158b. 

The movable portion 162 has a movable iron core 164 accommodated 
within the drive portion 163, and a connecting rod 165 connecting 



the movable iron core 164 and the link member 158b to each other. 
Further, the movable portion 162 is capable of reciprocating 
displacement between a contact position where the contact portions 
157 come into contact with the car guide rail 2 and a separated 
position where the contact portions 157 are separated away from 
contact with the car guide rail 2. 

The drive portion 163 has a stationary iron core 166 including 
a pair of regulating portions 166a and 166b regulating the 
displacement of the movable iron core 164 and a side wall portion 
166c that connects the regulating members 166a, 166b to each other 
and, surrounding the movable iron core 164, a first coil 167 which 
is accommodated within the stationary iron core 166 and which, when 
supplied with electric current, causes the movable iron core 164 
to be displaced into contact with the regulating portion 166a, a 
second coil 168 which is accommodated within the stationary iron 
core 166 and which, when supplied with electric current, causes 
the movable iron core 164 to be displaced into contact with the 
other regulating portion 166b, and an annular permanent magnet 169 
arranged between the first coil 167 and the second coil 168. 

The regulating member 166a is so arranged that the movable 
iron core 164 abuts on the regulating member 166a when the movable 
portion 162 is at the separated position. Further, the other 
regulating member 166b is so arranged that the movable iron core 
164 abuts on the regulating member 166b when the movable portion 
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162 is at the contact position. 

The first coil 167 and the second coil 168 are annular 
electromagnets that surround the movable portion 162 . Further, the 
first coil 167 is arranged between the permanent magnet 169 and 
the regulating portion 166a, and the second coil 168 is arranged 
between the permanent magnet 169 and the other regulating portion 
166b. 

With the movable iron core 164 abutting on the regulating 
portion 166a, a space serving as a magnetic resistance exists between 
the movable iron core 164 and the other regulating member 166b, 
with the result that the amount of magnetic flux generated by the 
permanent magnet 169 becomes larger on the first coil 167 side than 
on the second coil 168 side. Thus, the movable iron core 164 is 
retained in position while still abutting on the regulating member 
166a. 

Further, with the movable iron core 164 abutting on the other 
regulating portion 166b, a space serving as a magnetic resistance 
exists between the movable iron core 164 and the regulating member 
166a, with the result that the amount of magnetic flux generated 
by the permanent magnet 169 becomes larger on the second coil .168 
side than on the first coil 167 side. Thus, the movable iron core 
164 is retained in position while still abutting on the other 
regulating member 166b. 

Electric power serving as an actuation signal from the output 
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portion 32 can be input to the second coil 168. When input with 
the actuation signal, the second coil 168. generates a magnetic flux 
acting against the force that keeps the movable iron core 164 in 
abutment with the regulating portion 166a. Further, electric power 
serving as a recovery signal from the output portion 32 can be input 
to the first coil 167. When input with the recovery signal, the 
first coil 167 generates a magnetic flux acting against the force 
that keeps the movable iron core 164 in abutment with the other 
regulating portion 166b. 

Otherwise, this embodiment is of the same construction as 
Embodiment 2 . 

Next, operation is described. During normal operation, the 
movable portion 162 is located at the separated position, with the 
movable iron core 164 being held in abutment on the regulating portion 
166a by the holding force of the permanent magnet 169. With the 
movable iron core 164 abutting on the regulating portion 166a, the 
wedge 34 is maintained at a spacing from the guide portion 36 and 
separated away from the car guide rail 2. 

Thereafter, as in Embodiment 2, by outputting an actuation 
signal to each safety device 155 from the output portion 32, electric 
current is supplied to the second coil 168 . This generates a magnetic 
flux around the second coil 168, which causes the movable iron core 
164 to be displaced toward the other regulating portion 166b, that 
is, from the separated position to the contact position. As this 
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happens, the contact portions 157 are displaced so as to approach 
each other, coming into contact with the car guide rail 2. Braking 
is thus applied to the wedge 34 and the actuator portion 155. 

Thereafter, the guide portion 36 continues its descent, thus 
approaching the wedge 34 and the actuator portion 155. As a result, 
the wedge 34 is guided along the inclined surface 44, causing the 
car guide rail 2 to be held between the wedge 34 and the contact 
surface 45. Thereafter, the car 3 is braked through operations 
identical to those of Embodiment 2. 

During the recovery phase, a recovery signal is transmitted 
from the output portion 32 to the first coil 167. As a result, a 
magnetic flux is generated around the first coil 167, causing the 
movable iron core 164 to be displaced from the contact position 
to the separated position. Thereafter, the press contact of the 
wedge 34 and the contact surface 45 with the car guide rail 2 is 
released in the same manner as in Embodiment 2 . 

In the elevator apparatus as described above, the actuating 
mechanism 159 causes the pair of contact portions 157 to be displaced 
through the intermediation of the link members 158a, 158b, whereby, 
in addition to the same effects as those of Embodiment 2, it is 
possible to reduce the number of actuating mechanisms 159 required 
for displacing the pair of contact portions 157. 

Embodiment 10 
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Fig . 17 is a partially cutaway side view showing a safety device 
according to Embodiment 10 of the present invention. Referring to 
Fig. 17, a safety device 175 has the wedge 34, an actuator portion 
176 connected to a lower portion of the wedge 34, and the guide 
portion 36 arranged above the wedge 34 and fixed to the car 3. 

The actuator portion 176 has the actuating mechanism 159 
constructed in the same manner as that of Embodiment 9, and a link 
member 177 displaceable through displacement of the movable portion 
162 of the actuating mechanism 159. 

The actuating mechanism 159 is fixed to a lower portion of 
the car 3 so as to allow reciprocating displacement of the movable 
portion 162 in the horizontal direction with respect to the car 
3. The link member 177 is pivotably provided to a stationary shaft 
180 fixed to a lower portion of the car 3. The stationary shaft 
180 is arranged below the actuating mechanism 159. 

The link member 177 has a first link portion 178 and a second 
link portion 179 which extend in different directions from the 
stationary shaft 180 taken as the start point. The overall 
configuration of the link member 177 is substantially a prone shape. 
That is, the second link portion 179 is fixed to the first link 
portion 178, and the first link portion 178 and the second link 
portion 179 are integrally pivotable about the stationary shaft 
180 . 

The length of the first link portion 178 is larger than that 



of the second link portion 179. Further, an elongate hole 182 is 
provided at the distal end portion of the first link portion 178. 
A slide pin 183, which is slidably passed through the elongate hole 
182, is fixed to a lower portion of the wedge 34. That is, the wedge 
34 is slidably connected to the distal end portion of the first 
link portion 178. The distal end portion of the movable portion 
162 is pivotably connected to the distal end portion of the second 
link portion 179 through the intermediation of a connecting pin 
181. 

The link member 177 is capable of reciprocating movement 
between a separated position where it keeps the wedge 34 separated 
away from and below the guide portion 36 and an actuating position 
where it causes the wedge 34 to wedge in between the car guide rail 
and the guide portion 36. The movable portion 162 is projected from 
the drive portion 163 when the link member 177 is at the separated 
position, and it is retracted into the drive portion 163 when the 
link member is at the actuating position. 

Next, operation is described. During normal operation, the 
link member 177 is located at the separated position due to the 
retracting motion of the movable portion 162 into the drive portion 
163. At this time, the wedge 34 is maintained at a spacing from 
the guide portion 36 and separated away from the car guide rail. 

Thereafter, in the same manner as in Embodiment 2 , an actuation 
signal is output from the output portion 32 to each safety device 



175, causing the movable portion 162 to advance. As a result, the 
link member 177 is pivoted about the stationary shaft 180 for 
displacement into the actuating position . This causes the wedge 
34 to come into contact with the guide portion 36 and the car guide 
rail, wedging in between the guide portion 36 and the car guide 
rail. Braking is thus applied to the car 3. 

During the recovery phase, a recovery signal is transmitted 
from the output portion 32 to each safety device 175, causing the 
movable portion 162 to be urged in the retracting direction. The 
car 3 is raised in this state, thus releasing the wedging of the 
wedge 34 in between the guide portion 36 and the car guide rail. 

The above-described elevator apparatus also provides the same 
effects as those of Embodiment 2. 

Embodiment 11 

Fig. 18 is a schematic diagram showing an elevator apparatus 
according to Embodiment 11 of the present invention. In Fig 18, 
a hoisting machine 101 serving as a driving device and a control 
panel 102 are provided in an upper portion within the hoistway 1. 
The control panel 102 is electrically connected to the hoisting 
machine 101 and controls the operation of the elevator . The hoisting 
machine 101 has a driving device main body 103 including a motor 
and a driving sheave 104 rotated by the driving device main body 
103 . A plurality of main ropes 4 are wrapped around the sheave 104 . 



The hoisting machine 101 further includes a deflector sheave 105 
around which each main rope 4 is wrapped, and a hoisting machine 
braking device (deceleration braking device) 10.6 for braking the 
rotation of the drive sheave 104 to decelerate the car 3. The car 
3 and a counter weight 107 are suspended in the hoistway 1 by means 
of the main ropes 4. The car 3 and the counterweight 107 are raised 
and lowered in the hoistway 1 by driving the hoisting machine 101. 

The safety device 33, the hoisting machine braking device 106, 
and the control panel 102 are electrically connected to a monitor 
device 108 that constantly monitors the state of the elevator. A 
car position sensor 109, a car speed sensor 110 , and a car acceleration 
sensor 111 are also electrically connected to the monitor device 
108. The car position sensor 109, the car speed sensor 110, and 
the car acceleration sensor 111 respectively serve as a car position 
detecting portion for detecting the speed of the car 3, a car speed 
detecting portion for detecting the speed of the car 3, and a car 
acceleration detecting portion for detecting the acceleration of 
the car 3. The car position sensor 109, the car speed sensor 110, 
and the car acceleration sensor 111 are provided in the hoistway 
1. 

Detection means 112 for detecting the state of the elevator 
includes the car position sensor 109, the car speed sensor 110, 
and the car acceleration sensor 111. Any of the following may be 
used for the car position sensor 109: an encoder that detects the 



position of the car 3 by measuring the amount of rotation of a rotary 
member that rotates as the car 3 moves; a linear encoder that detects 
the position of the car 3 by measuring the amount of linear 
displacement of the car 3; an optical displacement measuring device 
which includes, for example, a pro j ector and a photodetector provided 
in the hoistway 1 and a reflection plate provided in the car 3, 
and which detects the position of the car 3 by measuring how long 
it takes for light projected from the projector to reach the 
photodetector . 

The monitor device 108 includes a memory portion 113 and an 
output portion (calculation portion) 114. The memory portion 113 
stores in advance a variety of (in this embodiment, two) abnormality 
determination criteria (set data) serving as criteria for judging 
whether or not there is an abnormality in the elevator. The output 
portion 114 detects whether or not there is an abnormality in the 
elevator based on information from the detection means 112 and the 
memory portion 113. The two kinds of abnormality determination 
criteria stored in the memory portion 113 in this embodiment are 
car speed abnormality determination criteria relating to the speed 
of the car 3 and car acceleration abnormality determination criteria 
relating to the acceleration of the car 3. 

Fig. 19 is a graph showing the car speed abnormality 
determination criteria stored in the memory portion 113 of Fig. 
18. In Fig. 19, an ascending/descending section of the car 3 in 



the hoistway 1 (a section between one terminal floor and an other 
terminal floor) includes acceleration/deceleration sections and 
a constant speed section located between the 

acceleration/deceleration sections. The car 3 

accelerates/decelerates in the acceleration/deceleration sections 
respectively located in the vicinity of the one terminal floor and 
the other terminal floor. The car 3 travels at a constant speed 
in the constant speed section. 

The car speed abnormality determination criteria has three 
detection patterns each associated with the position of the car 
3. That is, a normal speed detection pattern (normal level) 115 
that is the speed of the car 3 during normal operation, a first 
abnormal speed detection pattern (first abnormal level) 116 having 
a larger value than the normal speed detection pattern 115, and 
a second abnormal speed detection pattern (second abnormal level) 
117 having a larger value than the first abnormal speed detection 
pattern 116 are set, each in association with the position of the 
car 3 . 

The normal speed detection pattern 115, the first abnormal 
speed detection pattern 116, and a second abnormal speed detection 
pattern 117 are set so as to have a constant value in the constant 
speed section, and to have a value continuously becoming smaller 
toward the terminal floor in each of the acceleration and deceleration 
sections. The difference in value between the first abnormal speed 



detection pattern 116 and the normal speed detection pattern 115, 
and the difference in value between the second abnormal speed 
detection pattern 117 and the first abnormal speed detection pattern 
116, are set to be substantially constant at all locations in the 
ascending/descending section . 

Fig. 20 is a graph showing the car acceleration abnormality 
determination criteria stored in the memory portion 113 of Fig. 
18. In Fig. 20, the car acceleration abnormality determination 
criteria has three detection patterns each associated with the 
position of the car 3. That is, a normal acceleration detection 
pattern (normal level) 118 that is the acceleration of the car 3 
during normal operation, a first abnormal acceleration detection 
pattern (first abnormal level) 119 having a larger value than the 
normal acceleration detection pattern 118, and a second abnormal 
acceleration detection pattern (second abnormal level) 120 having 
a larger value than the first abnormal acceleration detection pattern 
119 are set, each in association with the position of the car 3. 

The normal acceleration detection pattern 118, the first 
abnormal acceleration detection pattern 119, and the second abnormal 
acceleration detection pattern 120 are each set so as to have a 
value of zero in the constant speed section, a positive value in 
one of the acceleration/deceleration section, and a negative value 
in the other acceleration/deceleration section. The difference in 
value between the first abnormal acceleration detection pattern 



119 and the normal acceleration detection pattern 118, and the 
difference in value between the second abnormal acceleration 
detection pattern 120 and the first abnormal acceleration detection 
pattern 119, are set to be substantially constant at all locations 
in the ascending/descending section. 

That is, the memory portion 113 stores the normal speed 
detection pattern 115, the first abnormal speed detection pattern 
116, and the second abnormal speed detection pattern 117 as the 
car speed abnormality determination criteria, and stores the normal 
acceleration detection pattern 118, the first abnormal acceleration 
detection pattern 119, and the second abnormal acceleration 
detection pattern 120 as the car acceleration abnormality 
determination criteria . 

The safety device 33, the control panel 102, the hoisting 
machine braking device 106, the detection means 112, and the memory 
portion 113 are electrically connected to the output portion 114. 
Further, a position detection signal, a speed detection signal, 
and an acceleration detection signal are input to the output portion 
114 continuously over time from the car position sensor 109, the 
car speed sensor 110, and the car acceleration sensor 111 . The output 
portion 114 calculates the position of the car 3 based on the input 
position detection signal. The output portion 114 also calculates 
the speed of the car 3 and the acceleration of the car 3 based on 
the input speed detection signal and the input acceleration detection 
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signal, respectively, as a variety of (in this example, two) 
abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first, abnormal speed detection pattern 
116, or when the acceleration of the car 3 exceeds the first abnormal 
acceleration detection pattern 119. At the same time, the output 
portion 114 outputs a stop signal to the control panel 102 to stop 
the drive of the hoisting machine 101. When the speed of the car 
3 exceeds the second abnormal speed detection pattern 117, or when 
the acceleration of the car 3 exceeds the second abnormal acceleration 
detection pattern 120, the output portion 114 outputs an actuation 
signal to the hoisting machine braking device 106 and the safety 
device 33. That is, the output portion 114 determines to which 
braking means it should output the actuation signals according to 
the degree of the abnormality in the speed and the acceleration 
of the car 3. 

Otherwise, this embodiment is of the same construction as 
Embodiment 2 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the acceleration detection 
signal are input to the output portion 114 from the car position 
sensor 109, the car speed sensor 110, and the car acceleration sensor 
111, respectively, the output portion 114 calculates the position, 
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the speed, and the acceleration of the car 3 based on the respective 
detection signals thus input. After that, the output portion 114 
compares the car speed abnormality determination criteria and the 
car acceleration abnormality determination criteria obtained from 
the memory portion 113 with the speed and the acceleration of the 
car 3 calculated based on the respective detection signals input. 
Through this comparison, the output portion 114 detects whether 
or not there is an abnormality in either the speed or the acceleration 
of the car 3. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the acceleration of the car 3 has approximately the same value 
as the normal acceleration detection pattern. Thus, the output 
portion 114 detects that there is no abnormality in either the speed 
or the acceleration of the car 3, and normal operation of the elevator 
continues . 

When, for example, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 due to 
some cause, the output portion 114 detects that there is an abnormality 
in the speed of the car 3. Then, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 
device 106 and the control panel 102, respectively. As a result, 
the hoisting machine 101 is stopped, and the hoisting machine braking 
device 106 is operated to brake the rotation of the drive sheave 
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104 . 

When the acceleration of the car 3 abnormally increases and 
exceeds the first abnormal acceleration set value 119, the output 
portion 114 outputs an actuation signal and a stop signal to the 
hoisting machine braking device 106 and the control panel 102, 
respectively, thereby braking the rotation of the drive sheave 104 . 

If the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106 and exceeds 
the second abnormal speed set value 117, the output portion 114 
outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

Further, when the acceleration of the car 3 continues to 
increase after the actuation of the hoisting machine braking device 
106, and exceeds the second abnormal acceleration set value 120, 
the output portion 114 outputs an actuation signal to the safety 
device 33 while still outputting the actuation signal to the hoisting 
machine braking device 106. Thus, the safety device 33 is actuated. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the acceleration of the car 3 based on 
the information from the detection means 112 for detecting the state 
of the elevator. When the monitor device 108 judges that there is 
an abnormality in the obtained speed of the car 3 or the obtained 



acceleration of the car 3, the monitor device 108 outputs an actuation 
signal to at least one of the hoisting machine braking device 106 
and the safety device 3 3 . That is, judgment of the presence or absence 
of an abnormality is made by the monitor device 108 separately for 
a variety of abnormality determination factors such as the speed 
of the car and the acceleration of the car. Accordingly, an 
abnormality in the elevator can be detected earlier and more reliably . 
Therefore, it takes a shorter time for the braking force on the 
car 3 to be generated after occurrence of an abnormality in the 
elevator . 

Further, the monitor device 108 includes the memory portion 
113 that stores the car speed abnormality determination criteria 
used for judging whether or not there is an abnormality in the speed 
of the car 3, and the car acceleration abnormality determination 
criteria used for judging whether or not there is an abnormality 
in the acceleration of the car 3. Therefore, it is easy to change 
the judgment criteria used for judging whether or not there is an 
abnormality in the speed and the acceleration of the car 3, 
respectively, allowing easy adaptation to design changes or the 
like of the elevator. 

Further, the following patterns are set for the car speed 
abnormality determination criteria: the normal speed detection 
pattern 115, the first abnormal speed detection pattern 116 having 
a larger value than the normal speed detection pattern 115, and 
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the second abnormal speed detection pattern 117 having a larger 
value than the first abnormal speed detection pattern 116. When 
the speed of the car 3 exceeds the first abnormal speed detection 
pattern 116, the monitor device 108 outputs an actuation signal 
to the hoisting machine braking device 106, and when the speed of 
the car 3 exceeds the second abnormal speed detection pattern 117, 
the monitor device 108 outputs an actuation signal to the hoisting 
machine braking device 106 and the safety device 33. Therefore, 
the car 3 can be braked stepwise according to the degree of this 
abnormality in the speed of the car 3. As a result, the frequency 
of large shocks exerted on the car 3 can be reduced, and the car 
3 can be more reliably stopped. 

Further, the following patterns are set for the car 
acceleration abnormality determination criteria: the normal 
acceleration detection pattern 118, the first abnormal acceleration 
detection pattern 119 having a larger value than the normal 
acceleration detection pattern 118, and the second abnormal 
acceleration detection pattern 120 having a larger value than the 
first abnormal acceleration detection pattern 119. When the 
acceleration of the car 3 exceeds the first abnormal acceleration 
detection pattern 119, the monitor device 108 outputs an actuation 
signal to the hoisting machine braking device 106, and when the 
acceleration of the car 3 exceeds the second abnormal acceleration 
detection pattern 120, the monitor device 108 outputs an actuation 
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signal to the hoisting machine braking device 106 and the safety 
device 33. Therefore, the car 3 can be braked stepwise according 
to. the degree of an abnormality in the acceleration of the car 3. 
Normally, an abnormality occurs in the acceleration of the car 3 
before an abnormality occurs in the speed of the car 3. As a result, 
the frequency of large shocks exerted on the car 3 can be reduced, 
and the car 3 can be more reliably stopped. 

Further, the normal speed detection pattern 115, the first 
abnormal speed detection pattern 116, and the second abnormal speed 
detection pattern 117 are each set in association with the position 
of the car 3. Therefore, the first abnormal speed detection pattern 
116 and the second abnormal speed detection pattern 117 each can 
be set in association with the normal speed detection pattern 115 
at all locations in the ascending/descending section of the car 
3. In the acceleration/deceleration sections, in particular, the 
first abnormal speed detection pattern 116 and the second abnormal 
speed detection pattern 117 each can be set to a relatively small 
value because the normal speed detection pattern 115 has a small 
value. As a result, the impact acting on the car 3 upon braking 
can be mitigated. 

It should be noted that in the above-described example, the 
car speed sensor 110 is used when the monitor 108 obtains the speed 
of the car 3. However, instead of using the car speed sensor 110, 
the speed of the car 3 may be obtained from the position of the 



car 3 detected by the car position sensor 109. That is, the speed 
of the car 3 may be obtained by differentiating the position of 
the car 3 calculated by using the position detection signal from 
the car position sensor 109. 

Further, in the above-described example, the car acceleration 
sensor 111 is used when the monitor 108 obtains the acceleration 
of the car 3 . However, instead of using the car acceleration sensor 
111, the acceleration of the car 3 may be obtained from the position 
of the car 3 detected by the car position sensor 109. That is, the 
acceleration of the car 3 may be obtained by differentiating, twice, 
the position of the car 3 calculated by using the position detection 
signal from the car position sensor 109. 

Further, in the above-described example, the output portion 
114 determines to which braking means it should output the actuation 
signals according to the degree of the abnormality in the speed 
and acceleration of the car 3 constituting the abnormality 
determination factors. However, the braking means to which the 
actuation signals are to be output may be determined in advance 
for each abnormality determination factor. 

Embodiment 12 

Fig. 21 is a schematic diagram showing an elevator apparatus 
according to Embodiment 12 of the present invention. In Fig. 21, 
a plurality of hall call buttons 125 are provided in the hall of 



each floor . A plurality of destination floor buttons 12 6 are provided 
in the car 3. A monitor device 127 has the output portion 114. An 
abnormality determination criteria generating device 128 for 
generating a car speed abnormality determination criteria and a 
car acceleration abnormality determination criteria is electrically 
connected to the output portion 114 . The abnormality determination 
criteria generating device 128 is electrically connected to each 
hall call button 125 and each destination floor button 126. A 
position detection signal is input to the abnormality determination 
criteria generating device 128 from the car position sensor 109 
via the output portion 114. 

The abnormality determination criteria generating device 128 
includes a memory portion 129 and a generation portion 130. The 
memory portion 129 stores a plurality of car speed abnormality 
determination criteria and a plurality of car acceleration 
abnormality determination criteria, which serve as abnormal judgment 
criteria for all the cases where the car 3 ascends and descends 
between the floors. The generation portion 130 selects a car speed 
abnormality determination criteria and a car acceleration 
abnormality determination criteria one by one from the memory portion 
129, and outputs the car speed abnormality determination criteria 
and the car acceleration abnormality determination criteria to the 
output portion 114. 

Each car speed abnormality determination criteria has three 



detection patterns each associated with the position of the car 
3, which are similar to those of Fig. 19 of Embodiment 11. Further, 
each car acceleration abnormality determination criteria has three 
detection patterns each associated with the position of the car 
3, which are similar to those of Fig. 20 of Embodiment 11. 

The generation portion 130 calculates a detection position 
of the car 3 based on information from the car position sensor 109, 
and calculates a target floor of the car 3 based on information 
from at least one of the hall call buttons 125 and the destination 
floor buttons 126. The generation portion 130 selects one by one 
a car speed abnormality determination criteria and a car acceleration 
abnormality determination criteria used for a case where the 
calculated detection position and the target floor are one and the 
other of the terminal floors. 

Otherwise, this embodiment is of the same construction as 
Embodiment 11 . 

Next, operation is described. A position detection signal 
is constantly input to the generation portion 130 from the car position 
sensor 109 via the output portion 114. When a passenger or the like 
selects any one of the hall call buttons 125 or the destination 
floor buttons 126 and a call signal is input to the generation portion 
130 from the selected button, the generation portion 130 calculates 
a detection position and a target floor- of the car 3 based on the 
input position detection signal and the input call signal , and selects 



one out of both a car speed abnormality determination criteria and 
a car acceleration abnormality determination criteria . After that, 
the generation portion 130 outputs the selected car speed abnormality 
determination criteria and the selected car acceleration abnormality 
determination criteria to the output portion 114. 

The output portion 114 detects whether or not there is an 
abnormality in the speed and the acceleration of the car 3 in the 
same way as in Embodiment 11. Thereafter, this embodiment is of 
the same operation as Embodiment 9. 

With such an elevator apparatus, the car speed abnormality 
determination criteria . and the car acceleration abnormality 
determination criteria are generated based on the information from 
at least one of the hall call buttons 125 and the destination floor 
buttons 126. Therefore, it is possible to generate the car speed 
abnormality determination criteria and the car acceleration 
abnormality determination criteria corresponding to the target floor . 
As a result, the time it takes for the braking force on the car 
3 to be generated after occurrence of an abnormality in the elevator 
can be reduced even when a different target floor is selected. 

It should be noted that in the above-described example, the 
generation portion 130 selects one out of both the car speed 
abnormality determination criteria and car acceleration abnormality 
determination criteria from among a plurality of car speed 
abnormality determination criteria and a plurality of car 
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acceleration abnormality determination criteria stored in thememory 
portion 129 . However, the generation portion may directly generate 
an abnormal speed detection pattern and an abnormal acceleration 
detection pattern based on the normal speed pattern and the normal 
acceleration pattern of the car 3 generated by the control panel 
102. 

Embodiment 13 

Fig. 22 is a schematic diagram showing an elevator apparatus 
according to Embodiment 13 of the present invention . In this example, 
each of the main ropes 4 is connected to an upper portion of the 
car 3 via a rope fastening device 131 (Fig. 23) . The monitor device 
108 is mounted on an upper portion of the car 3. The car position 
sensor 109, the car speed sensor 110, and a plurality of rope sensors 
132 are electrically connected to the output portion 114. Rope 
sensors 132 are provided in the rope fastening device 131, and each 
serve as a rope break detecting portion for detecting whether or 
not a break has occurred in each of the ropes 4 . The detection means 
112 includes the car position sensor 109, the car speed sensor 110, 
and the rope sensors 132. 

The rope sensors 132 each output a rope brake detection signal 
to the output portion 114 when the main ropes 4 break. The memory 
portion 113 stores the car speed abnormality determination criteria 
similar to that of Embodiment 11 shown in Fig. 19, and a rope 
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abnormality determination criteria used as a reference for judging 
whether or not there is an abnormality in the main ropes 4. 

A first abnormal level indicating a state where at least one 
of the main ropes 4 have broken, and a second abnormal level indicating 
a state where all of the main ropes 4 has broken are set for the 
rope abnormality determination criteria. 

The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
main ropes 4 based on the input speed detection signal and the input 
rope brake signal, respectively, as a variety of (in this example, 
two) abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first abnormal speed detection pattern 
116 (Fig. 19), or when at least one of the main ropes 4 breaks. 
When the speed of the car 3 exceeds the second abnormal speed detection 
pattern 117 (Fig. 19), or when all of the main ropes 4 break, the 
output portion 114 outputs an actuation signal to the hoist ing machine 
braking device 106 and the safety device 33. That is, the output 
portion 114 determines to which braking means it should output the 
actuation signals according to the degree of an abnormality in the 
speed of the car 3 and the state of the main ropes 4. 

Fig. 23 is a diagram showing the rope fastening device 131 
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and the rope sensors 132 of Fig. 22. Fig. 24 is a diagram showing 
a state where one of the main ropes 4 of Fig. 23 has broken. In 
Figs. 23 and 24, the rope fastening device 131 includes a plurality 
of rope connection portions 134 for connecting the main ropes 4 
to the car 3 . The rope connection portions 134 each include an spring 
133 provided between the main rope 4 and the car 3. The position 
of the car 3 is displaceable with respect to the main ropes 4 by 
the expansion and contraction of the springs 133. 

The rope sensors 132 are each provided to the rope connection 
portion 134. The rope sensors 132 each serve as a displacement 
measuring device for measuring the amount of expansion of the spring 
133. Each rope sensor 132 constantly outputs a measurement signal 
corresponding to the amount of expansion of the spring 133 to the 
output portion 114 . Ameasurement signal obtained when the expansion 
of the spring 133 returning to its original state has reached a 
predetermined amount is input to the output portion 114 as a break 
detection signal . It should be noted that each of the rope connection 
portions 134 may be provided with a scale device that directly measures 
the tension of the main ropes 4 . 

Otherwise, this embodiment is of the same construction as 
Embodiment 11 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the break detection signal 
are input to the output portion 114 from the car position sensor 
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109, the car speed sensor 110, and each rope sensor 131, respectively, 
the output portion 114 calculates the position of the car 3, the 
speed of the car 3, and the number of main ropes 4 that have broken 
based on the respective detection signals thus input. After that, 
the output portion 114 compares the car speed abnormality 
determination criteria and the rope abnormality determination 
criteria obtained from the memory portion 113 with the speed of 
the car 3 and the number of broken main ropes 4 calculated based 
on the respective detection signals input . Through this comparison, 
the output portion 114 detects whether or not there is an abnormality 
in both the speed of the car 3 and the state of the main ropes 4 . 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the number of broken main ropes 4 is zero. Thus, the output 
portion 114 detects that there is no abnormality in either the speed 
of the car 3 or the state of the main ropes 4, and normal operation 
of the elevator continues. 

When, for example, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
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machine raking device 106 is operated to brake the rotation of the 
drive sheave 104. 

Further, when at least one of the main ropes 4 has broken, 
the output portion 114 outputs an actuation signal and a stop signal 
to the hoisting machine braking device 106 and the control panel 
102, respectively, thereby braking the rotation of the drive sheave 
104 . 

If the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106 and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

Further, if all the main ropes 4 break after the actuation 
of the hoisting machine braking device 106, the output portion 114 
outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the state of the main ropes 4 based on 
the information from the detection means 112 for detecting the state 
of the elevator. When the monitor device 108 judges that there is 
an abnormality in the obtained speed of the car 3 or the obtained 
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state of the main ropes 4 , the monitor device 108 outputs an actuation 
signal to at least one of the hoisting machine braking device 106 
and the safety device 33. This means that the number of targets 
for abnormality detection increases , allowing abnormality detection 
of not only the speed of the car 3 but also the state of the main 
ropes 4 . Accordingly, an abnormality in the elevator can be detected 
earlier and more reliably. Therefore, it takes a shorter time for 
the braking force on the car 3 to be generated after occurrence, 
of an abnormality in the elevator. 

It should be noted that in the above-described example, the 
rope sensor 132 is disposed in the rope fastening device 131 provided 
to the car 3. However, the rope sensor 132 may be disposed in a 
rope fastening device provided to the counterweight 107. 

Further, in the above-described example, the present invention 
is applied to an elevator apparatus of the type in which the car 
3 and the counterweight 107 are suspended in the hoistway 1 by 
connecting one end portion and the other end portion of the main 
rope 4 to the car 3 and the counterweight 107 , respectively. However, 
the present invention may also be applied to an elevator apparatus 
of the type in which the car 3 and the counterweight 107 are suspended 
in the hoistway 1 by wrapping the main rope 4 around a car suspension 
sheave and a counterweight suspension sheave, with one end portion 
and the other end portion of the main rope 4 connected to structures 
arranged in the hoistway 1 . In this case, the rope sensor is disposed 
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in the rope fastening device provided to the structures arranged 
in the hoistway 1, 

Embodiment 14 

Fig. 25 is a schematic diagram showing an elevator apparatus 
according to Embodiment 14 of the present invention. In this example, 
a rope sensor 135 serving as a rope brake detecting portion is 
constituted by lead wires embedded in each of the main ropes 4. 
Each of the lead wires extends in the longitudinal direction of 
the rope 4. Both end portion of each lead wire are electrically 
connected to the output portion 114. A weak current flows in the 
lead wires. Cut-off of current flowing in each of the lead wires 
is input as a rope brake detection signal to the output portion 
114 . 

Otherwise, this embodiment is of the same construction as 
Embodiment 13. 

With such an elevator apparatus, a break in any main rope 4 
is detected based on cutting off of current supply to any lead wire 
embedded in the main ropes 4. Accordingly, whether or not the rope 
has broken is more reliably detected without being affected by a 
change of tension of the main ropes 4 due to acceleration and 
deceleration of the car 3. 

Embodiment 15 
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Fig. 26 is a schematic diagram showing an elevator apparatus 
according to Embodiment 15 of the present invention. In Fig. 26, 
the car position sensor 109, the car speed sensor 110, and a door 
sensor 140 are electrically connected to the output portion 114. 
The door sensor 140 serves as an entrance open/closed detecting 
portion for detecting open /closed of the car entrance 26 . The 
detection means 112 includes the car position sensor 109, the car 
speed sensor 110, and the door sensor 140. 

The door sensor 140 outputs a door-closed detection signal 
to the output portion 114 when the car entrance 26 is closed. The 
memory portion 113 stores the car speed abnormality determination 
criteria similar to that of Embodiment 11 shown in Fig. 19, and 
an entrance abnormality determination criteria used as a reference 
for judging whether or not there is an abnormality in the open/close 
state of the car entrance 26. If the car ascends/descends while 
the car entrance 26 is not closed, the entrance abnormality 
determination criteria regards this as an abnormal state. 

The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
car entrance 26 based on the input speed detection signal and the 
input door-closing detection signal, respectively, as a variety 
of (in this example, two) abnormality determination factors. 

The output portion 114 outputs an actuation signal to the 
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hoisting machine braking device 104 if the car ascends/descends 
while the car entrance 26 is not closed, or if the speed of the 
car 3 exceeds the first abnormal speed detection pattern 116 (Fig. 
19) . If the speed of the car 3 exceeds the second abnormal speed 
detection pattern 117 (Fig. 19), the output portion 114 outputs 
an actuation signal to the hoisting machine braking device 106 and 
the safety device 33. 

Fig. 27 is a perspective view of the car 3 and the door sensor 
140 of Fig. 26. Fig. 28 is a perspective view showing a state in 
which the car entrance 26 of Fig. 27 is open. In Figs. 27 and 28, 
the door sensor 140 is provided at an upper portion of the car entrance 
26 and in the center of the car entrance 26 with respect to the 
width direction of the car 3. The door sensor 140 detects 
displacement of each of the car doors 2 8 into the door-closed position, 
and outputs the door-closed detection signal to the output portion 
114. 

It should be noted that a contact type sensor, a proximity 
sensor, or the like may be used for the door sensor 140. The contact 
type sensor detects closing of the doors through its contact with 
a fixed portion secured to each of the car doors 28. The proximity 
sensor detects closing of the doors without contacting the car doors 
28. Further, a pair of hall doors 142 for opening/closing a hall 
entrance 141 are provided at the hall entrance 141. The hall doors 
142 are engaged to the car doors 28 by means of an engagement device 
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(not shown) when the car 3 rests at a hall floor, and are displaced 
together with the car doors 28. 

Otherwise, this embodiment is of the same construction as 
Embodiment 11 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the door-closed detection 
signal are input to the output portion 114 from the car position 
sensor 10 9, the car speed sensor 110, and the door sensor 140, 
respectively, the output portion 114 calculates the position of 
the car 3, the speed of the car 3, and the state of the car entrance 
26 based on the respective detection signals thus input. After that, 
the output portion 114 compares the car speed abnormality 
determination criteria and the drive device state abnormality 
determination criteria obtained from the memory portion 113 with 
the speed of the car 3 and the state of the car of the car doors 
28 calculated based on the respective detection signals input. 
Through this comparison, the output portion 114 detects whether 
or not there is an abnormality in each' of the speed of the car 3 
and the state of the car entrance 26. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the car entrance 26 is closed while the car 3 ascends/descends. 
Thus, the output portion 114 detects that there is no abnormality 
in each of the speed of the car 3 and the state of the car entrance 
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26, and normal operation of the elevator continues. 

When, for instance, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
machine braking device 106 is actuated to brake the rotation of 
the drive sheave 104. 

Further, the output portion 114 also detects an abnormality 
in the car entrance 26 when the car 3 ascends/descends while the 
car entrance 26 is not closed. Then, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 
device 106 and the control panel 102, respectively, thereby braking 
the rotation of the drive sheave 104. 

When the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106, and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

With such an elevator apparatus , the monitor device 108 obtains 



the speed of the car 3 and the state of the car entrance 26 based 
on the information from the detection means 112 for detecting the 
state of the elevator. When the monitor device 108 judges that there 
is an abnormality in the obtained speed of the car 3 or the obtained 
state of the car entrance 26, the monitor device 108 outputs an 
actuation signal to at least one of the hoisting machine braking 
device 106 and the safety device 33. This means that the number 
of targets for abnormality detection increases, allowing abnormality 
detection of not only the speed of the car 3 but also the state 
of the car entrance 26. Accordingly, abnormalities of the elevator 
can be detected earlier and more reliably. Therefore, it takes less 
time for the braking force on the car 3 to be generated after occurrence 
of an abnormality in the elevator. 

It should be noted that while in the above-described example, 
the door sensor 140 only detects the state of the car entrance 26, 
the door sensor 140 may detect both the state of the car entrance 
26 and the state of the elevator hall entrance 141. In this case, 
the door sensor 140 detects displacement of the elevator hall doors 
142 into the door-closed position, as well as displacement of the 
car doors 28 into the door-closed position. With this construction, 
abnormality in the elevator can be detected even when only the car 
doors 28 are displaced due to a problem with the engagement device 
or the like that engages the car doors 28 and the elevator hall 
doors 142 with each other. 
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Embodiment 16 

Fig. 29 is a schematic diagram showing an elevator apparatus 
according to Embodiment 16 of the present invention. Fig. 30 is 
a diagram showing an upper portion of the hoistway 1 of Fig. 29. 
In Figs . 29 and 30, a power supply cable 15 0 is electrically connected 
to the hoisting machine 101 . Drive power is supplied to the hoisting 
machine 101 via the power supply cable 150 through control of the 
control panel 102. 

A current sensor 151 serving as a drive device detection portion 
is provided to the power supply cable 150. The current sensor 151 
detects the state of the hoisting machine 101 by measuring the current 
flowing in the power supply cable 150 . The current sensor 151 outputs 
to the output portion 114 a current detection signal (drive device 
state detection signal) corresponding to the value of a current 
in the power supply cable 150. The current sensor 151 is provided 
in the upper portion of the hoistway 1. A current transformer (CT) 
that measures an induction current generated in accordance with 
the amount of current flowing in the power supply cable 150 is used 
as the current sensor 151, for example. 

The car position sensor 109, the car speed sensor 110, and 
the current sensor 151 are electrically connected to the output 
portion 114 . The detection means 112 includes the car position sensor 
109, the car speed sensor 110, and the current sensor 151. 



The memory portion 113 stores the car speed abnormality 
determination criteria similar to that of Embodiment 11 shown in 
Fig. 19, and a drive device abnormality determination criteria used 
as a reference for determining whether or not there is an abnormality 
in the state of the hoisting machine 101. 

The drive device abnormality determination criteria has three 
detection patterns. That is, a normal level that is the current 
value flowing in the power supply cable 150 during normal operation, 
a first abnormal level having a larger value than the normal level, 
and a second abnormal level having a larger value than the first 
abnormal level, are set for the drive device abnormality 
determination criteria . 

The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
hoisting device 101 based on the input speed detection signal and 
the input current detection signal, respectively, as a variety of 
(in this example, two) abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first abnormal speed detection pattern 
116 (Fig. 19), or when the amount of the current flowing in the 
power supply cable 150 exceeds the value of the first abnormal level 
of the drive device abnormality determination criteria. When the 



speed of the car 3 exceeds the second abnormal speed detection pattern 
117 (Fig. 19) , or when the amount of the current flowing in the 
power supply cable 150 exceeds the value of the second abnormal 
level of the drive device abnormality determination criteria, the 
output portion 114 outputs an actuation signal to the hoisting machine 
braking device 106 and the safety device 33. That is, the output 
portion 114 determines to which braking means it should output the 
actuation signals according to the degree of abnormality in each 
of the speed of the car 3 and the state of the hoisting machine 
101. 

Otherwise, this embodiment is of the same construction as 
embodiment 11. 

Next, operation is described. When the position detection 
signal, the speed detection signal , and the current detection signal 
are input to the output portion 114 from the car position sensor 
109, the car speed sensor 110, andthe current sensor 151, respectively, 
the output portion 114 calculates the position of the car 3, the 
speed of the car 3, and the amount of current flowing in the power 
supply cable 151 based on the respective detection signals thus 
input. After that, the output portion 114 compares the car speed 
abnormality determination criteria and the drive device state 
abnormality determination criteria. obtained from the memory portion 
113 with the speed of the car 3 and the amount of the current flowing 
into the current supply cable 150 calculated based on the respective 



detection signals input. Through this comparison, the output 
portion 114 detects whether or not there is an abnormality in each 
of the speed of the car 3 and the state of the hoisting machine 
101. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern 
115 (Fig. 19), and the amount of current flowing in the power supply 
cable 150 is at the normal level. Thus, the output portion 114 detects 
that there is no abnormality in each of the speed of the car 3 and 
the state of the hoisting machine 101, and normal operation of the 
elevator continues . 

If, for instance, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
machine braking device 106 is actuated to brake the rotation of 
the drive sheave 104. 

If the amount of current flowing in the power supply cable 
150 exceeds the first abnormal level in the drive device state 
abnormality determination criteria, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 



device 106 and the control panel 102, respectively, thereby braking 
the rotation of the drive sheave 104. 

When the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106, and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

When the amount of current flowing in the power supply cable 
150 exceeds the second abnormal level of the drive device state 
abnormality determination criteria after the actuation of the 
hoisting machine braking device 106, the output portion 114 outputs 
an actuation signal to the safety device 33 while still outputting 
the actuation signal to the hoisting machine braking device 106. 
Thus, the safety device 33 is actuated. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the state of the hoisting machine 101 
based on the information from the detection means 112 for detecting 
the state of the elevator. When the monitor device 108 judges that 
there is an abnormality in the obtained speed of the car 3 or the 
state of the hoisting machine 101, the monitor device 108 outputs 
an actuation signal to at least one of the hoisting machine braking 
device 106 and the safety device 33. This means that the number 



of targets for abnormality detection increases, and it takes a shorter 
time for the braking force on the car 3 to be generated after occurrence 
of an abnormality in the elevator. 

It should be noted that in the above-described example, the 
state of the hoisting machine 101 is detected using the current 
sensor 151 for measuring the amount of the current flowing in the 
power supply cable 150. However the state of the hoisting machine 
101 may be detected using a temperature sensor for measuring the 
temperature of the hoisting machine 101. 

Further, in Embodiments 11 through 16 described above, the 
output portion 114 outputs an actuation signal to the hoisting machine 
braking device 106 before outputting an actuation signal to the 
safety device 33 . However, the output portion 114 may instead output 
an actuation signal to one of the following brakes: a car brake 
for braking the car 3 by gripping the car guide rail 2, which is 
mounted on the car 3 independently of the safety device 33; a 
counterweight brake mounted on the counterweight 107 for braking 
the counterweight 107 by gripping a counterweight guide rail for 
guiding the counterweight 107 ; and a rope brake mounted in the hoist way 
1 for braking the main ropes 4 by locking up the main ropes 4. 

Further, in Embodiments 1 through 16 described above, the 
electric cable is used as the transmitting means for supplying power 
from the output portion to the safety device. However, a wireless 
communication device having a transmitter provided at the output 



portion and a receiver provided at the safety device may be used 
instead. Alternatively, an optical fiber cable that transmits an 
optical signal may be used. 

Further, in Embodiments 1 through 16, the safety device applies 
braking with respect to overspeed (motion) of the car in the downward 
direction . However, the safety device may apply braking with respect 
to overspeed (motion) of the car in the upward direction by using 
the safety device fixed upside down to the car. 

Embodiment 17 

Fig. 31 is ablock diagram showing an elevator control apparatus 
according to Embodiment 17 of the present invention . Referring to 
the figure, a ROM 202, a RAM 203, a timer 204, and an input/output 
portion 205 are connected to a CPU 201 as a calculation portion. 
Stored in the ROM 202 are a basic program for operating the elevator, 
a program regarding safety surveillance, and the like. 

Information can be written into and read from the RAM 203 by 
means of the CPU 201. Further, the RAM 203 includes a stack region 
that stores information required for calculations made by the CPU 
201. Stored in the stack region are, for example, a return address 
for a subroutine call, a return address for timer interrupt, an 
argument for a subroutine call, and the like. 

The operation of the elevator is controlled according to a 
timer interrupt control mode in which interrupt calculations are 



performed within a preset calculation period (e.g., 50 msec) . The 
interrupt period is calculated from a signal from the timer 204. 

Pieces of information required for operation control of the 
elevator and safety surveillance are input to the input/output 
portion 205. These pieces of information are transmitted from, for 
example, various sensors (detecting portions) described in 
Embodiments 1 to 16, the button device within the car, the hall 
button device, and the like. Further, a command signal calculated 
and generated by the CPU 201 is output to the driving device, the 
braking device, the emergency stop device, the door opening/closing 
device, the announcement device, the button device within the car, 
the hall button device, and the like via the input/output portion 
205. 

Further, stored in the ROM 202 is a program for conducting 
surveillance of the state of a preset surveillance region within 
the stack region of the ROM 203 . A stack region surveillance portion 
206 of Embodiment 17 has the CPU 201 and the ROM 202. That is, the 
main body of the control apparatus for controlling the operation 
of the elevator is provided with the stack region surveillance portion 
206. In other words, the main body of the control apparatus serves 
as the stack region surveillance portion 206 as well. The elevator 
control apparatus of Embodiment 17 controls the operation of the 
elevator according to the state of the stack region. 

Fig. 32 is an explanatory view showing regional segmentation 
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within the RAM 203 shown in Fig. 31. In this example, a region C000H 
to FFFFH is set as the stack region. Further, a region D000H to 
D010H within the stack region is set as the surveillance region. 

The way to use the stack region varies depending on a 
microcomputer. In general, however, the stack region is used such 
that data are built up toward newer addresses by means of a stack 
pointer of the microcomputer. In the case of Fig. 32, with FFFFH 
defined as an initial value of the stack pointer, the stack region 
is used in order of FFFFH - FFFEH - FFFDH C001H - C000H. 

Accordingly, the surveillance region D000H to D010H is used when 
75% of the stack region is used. 

Preferable as a position of the surveillance region is a region 
that is used when 50% or more of the stack region is used, particularly 
preferably, when 60% or more of the stack region is used. Further, 
preferable as a position of the surveillance region is a region 
that is used when 90% or less of the stack region is used, particularly 
preferably, when 80% or less of the stack region is used. 

The stack region is set to 0 in advance, and the stack region 
surveillance portion 206 makes surveillance as to whether or not 
the entire surveillance region is set to 0. When the surveillance 
region includes a datum other than 0, the stack region surveillance 
portion 206 determines that stack-over has occurred. 

Fig. 33 is a flowchart showing an initial operation of the 
elevator control apparatus shown in Fig. 31. When the elevator is 



activated, initial setting of the elevator control apparatus is 
carried out. When initial setting is started, all interrupt 
calculations are prohibited (step SI). After that, initial setting 
of the microcomputer is carried out (step S2) , and the RAM region 
is set to 0 (step S3) . After that, the interrupt calculations are 
enabled (step S4), and an interrupt waiting state is established 
(step S5) . The interrupt calculations are repeatedly performed at 
intervals of a calculation period. 

Fig. 34 is a flowchart showing flow of the interrupt 
calculations of the elevator control apparatus shown in Fig. 31. 
In starting the interrupt calculations, a state of the surveillance 
region is first confirmed (step S6) . That is, it is confirmed whether 
or not the surveillance region D000H to D010H is in a state of 0000H. 

When the surveillance region is not 0000H, it is determined 
that stack-over has occurred or is likely to occur in the RAM 203. 
That is, the value of the surveillance region unequal to 0 means 
an insufficient processing time for the interrupt calculations, 
and it is determined that stack-over has occurred because the 
interrupt calculations do not end within the calculation period. 
Thus, when stack-over is detected, a calculation for quickly stopping 
the car is performed (stepS7) . Further, when stack-over is detected, 
an abnormality detection signal is transmitted to the elevator 
surveillance room. 

When there is no abnormality in the surveillance region, an 
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input calculation for inputting signals required for the 
calculations is performed (step S8) . Then, a car position 
calculation for obtaining a current position of the car (step S9) , 
a call scan -calculation for detecting the presence/absence of a 
call registration (step S10) , and a distance calculation for 
calculating a distance from the current position of the car to a 
destination floor (stepSll) are sequentially per formed . After that, 
a running command calculation for obtaining a running command for 
the car based on the distance to the destination floor is performed 
(step S12) . 

When the running command calculation or the quick stop 
calculation is performed, a monitor calculation for displaying the 
state of the elevator on a monitor is performed (step S13) . Finally, 
an output calculation for outputting a command signal required for 
causing the car to run is performed (step S14). 

In the elevator control apparatus described above, the stack 
region surveillance portion 206 makes surveillance on the state 
of the surveillance region, and the car is quickly stopped when 
it is determined that there is an abnormality in the surveillance 
region. Therefore, the program is prevented from running out of 
control due to stack-over of the RAM 203. Thus, the components are 
prevented from being damaged. That is, the calculations regarding 
operation control by the computer can be performed more reliably. 
This results in the enhancement of reliability. 
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It is difficult to fathom the cause of an abnormality resulting 
from stack-over (buildup of stacks), and it takes a long time to 
remedy a malfunction. Stack-over may result from an abnormality 
in the microcomputer or the program. However, when there is no 
abnormality in the microcomputer or the program, the most probable 
cause of stack-over is considered to be incompletion of the interrupt 
calculations within the calculation period (calculation time-over ) . 

Calculation time-over usually does not occur, but it does due 
to a temporary increase in calculation time, for example, in the 
case where it takes a long time to perform the call scan calculation 
because of frequent operations of the call button. Further, 
calculation time-over may also occur as a result of a gradual increase 
in calculation time ascribable to repetitive reconstruction, 
improvement, or the like of software. 

When calculation time-over occurs, stack-over occurs and the 
stack region is incorrectly used, which causes a fear that the return 
address from timer interrupt may be broken . When the return address 
is broken, the program runs out of control or the RAM data are destroyed, 
which causes a fear that the elevator may become incontrollable . 

On the other hand, according to the elevator control apparatus 
of Embodiment 17 , stack-over can be detected earlier , and the program 
can be prevented from running out of control or the elevator is 
prevented from becoming incontrollable. This results in the 
enhancement of reliability. 
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Further, since the stack region surveillance portion 206 
confirms the state of the surveillance region at intervals of the 
preset calculation cycle, surveillance of the presence/absence of 
stack-over can always be conducted. This results in the enhancement 
of reliability. 

Further, when it is determined that there is an abnormality 
in the surveillance region, the car is quickly stopped. Therefore, 
the occurrence of a more serious malfunction can be prevented. 

Embodiment 18 

Fig. 35 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 18 of 
the present invention . In this example, when there is no abnormality 
in the surveillance region, calculation processings similar to those 
of Embodiment 17 are performed (steps S8 to S14) . On the other hand, 
when it is determined that there is an abnormality in the surveillance 
region, a calculation for stopping the car on the nearest floor 
is performed after the input calculation (step S15) and the car 
position calculation (step S16) have been performed. 

After the nearest floor stop calculation has been performed, 
the running command calculation (step S12) , the monitor calculation 
(step S13) , and the output calculation (step S14) are performed, 
and a command signal required for causing the car to run to the 
nearest floor is output. 
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According to the elevator control apparatus described above, 
when it is determined that there is an abnormality in the surveillance 
region, the car can be moved to the nearest floor and then stopped. 
Therefore, passengers in the car can be smoothly unloaded into the 
hall. 

Embodiment 19 

Fig. 36 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 19 of 
the present invention . In this example, when there is no abnormality 
in the surveillance region, calculation processings similar to those 
of Embodiment 17 are performed (steps S8 to S14) . On the other hand, 
when it is determined that there is an abnormality in the surveillance 
region, the calculations performed normally are partially omitted, 
and only the minimum required calculations are performed to continue 
operation. That is, in this example, the call scan calculation and 
the monitor calculation are omitted, and the input calculation (step 
S15), the car position calculation (step S16) , the distance 
calculation (step S18) , the running command calculation (step S19) , 
and the output calculation (step S20) are performed. 

In the case where no destination floor has been determined 
when an abnormality in the surveillance region is detected, the 
nearest floor is set as the destination floor. 

According to the elevator control apparatus described above, 
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when it is determined that there is an abnormality in the surveillance 
region, the calculations are partially omitted, which makes it 
possible to ensure time for the minimum required calculations and 
continue operation of the car. 

Embodiment 2 0 

Fig. 37 is a flowchart showing flow of interrupt calculations 
of the elevator control apparatus according to Embodiment 20 of 
the present invention . In this example, when there is no abnormality 
in the surveillance region, calculation processings similar to those 
of Embodiment 17 are performed (steps S8 to S14) . On the other hand, 
when it is determined that there is an abnormality in the surveillance 
region, the quick stop calculation (step S7) is performed, and an 
operation state of the elevator at that moment is recorded as a 
history (history calculation) (step S21) . The history is recorded 
in a region other than the stack region of the RAM 203. 

Fig. 38 is an explanatory view showing an example of data 
recorded by the history calculation shown in Fig. 37 . The operation 
state recorded as the history includes, for example, a CNT value, 
a date, a running/stopped state, a running direction, a dispatching 
floor, a current floor, a destination floor, the number of calls, 
and the like. Further, one abnormality is recorded as one TIME datum 
(history datum) . Furthermore, sixteen TIME data are saved. When 
the number of TIME data exceeds sixteen, the newest TIME datum is 
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saved and the oldest TIME datum is erased. 

The CNT value is used to create data that are to be incremented 
every time the interrupt calculations are performed, and calculate 
a stack-over generation time from a difference from a CNT value 
at the time of inspection. 

Fig. 39 is a flowchart showing flow of the history calculation 
shown in Fig. 37. In the history calculation, a history storage 
address is calculated from POINT and BUF (step S22), data on the 
operation state of the elevator are stored (step S23) , and POINT 
is updated for a subsequent history (step S24) . After that, it is 
determined whether or not POINT has reached sixteen (step S25) . 
When POINT has not reached sixteen, the history calculation is 
terminated . When POINT has reached sixteen, POINT for the subsequent 
history is reset to 0 (step S26) , and then the history calculation 
is terminated. 

In the elevator control apparatus described above, TIME data 
at the time when an abnormality has occurred in the surveillance 
region are saved. Thus/ confirmation of the TIME data during, for 
example, maintenance and inspection of the elevator can prevent 
the occurrence of stack-over or contribute toward fathoming the 
cause of stack-over. Further, confirmation of the TIME data at the 
time of the occurrence of an abnormality makes it possible to shorten 
a time required for remedying a malfunction. 
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Embodiment 21 

Fig. 40 is a schematic diagram showing an elevator apparatus 
according to Embodiment 21 of the present invention. A drive unit 
(hoisting machine) 211 and a deflector sheave 212 are provided in 
an upper portion of a hoistway. Wound around a drive sheave 211a 
of the drive unit 211 and the deflector sheave 212 is a main rope 
213. A car 214 and a counterweight 215 are suspended within the 
hoistway by means of the main rope 213. 

Mounted in a lower portion of the car 214 is a mechanical 
emergency stop device 216 for making an emergency stop of the car 
214 through engagement with a guide rail (not shown) . A governor 
sheave 217 is disposed in an upper portion of the hoistway . A tension 
pulley 218 is disposed in a lower portion of the hoistway. A governor 
rope 219 is wound around the governor sheave 217 and the tension 
pulley 218 . Both end portions of the governor rope 219 are connected 
to an actuating lever 216a of the emergency stop device 216. 
Accordingly, the governor sheave 217 is rotated at a speed 
corresponding to the running speed of the car 214. 

The governor sheave 217 is provided with a sensor 220 (e.g., 
an encoder) that outputs a signal for detecting the position and 
speed of the car 214. The signal from the sensor 220 is input to 
the input/output portion 205. 

Provided in the upper portion of the hoistway is a governor 
rope grip device 221 that holds the governor rope 219 and stops 
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circulation thereof. The governor rope grip device 221 has a grip 
portion 221a that grips the governor rope 219, and an electromagnetic 
actuator 221b that drives the grip portion 221a. 

When a command signal from the input/output portion 205 is 
input to the governor rope grip device 221, the grip portion 221a 
is displaced due to a driving force of the electromagnetic actuator 
221b, and the governor rope 219 is stopped from moving. When the 
governor rope 219 is stopped, the actuating lever 216a is operated 
due to a movement of the car 214, and the emergency stop device 
216 operates, thus stopping the car 214. 

Thus, in the elevator device in which a command signal from 
the input/output portion 205 is input to the electromagnetically 
driven governor rope grip device 221 as well, the enhancement of 
reliability can be achieved by providing the control apparatus with 
the stack region surveillance portion 206. 

In Embodiments 17 to 21, the calculation for conducting 
surveillance of the stack region is inserted among the interrupt 
calculations for operating the elevator . However, the surveillance 
of the stack region may be carried out as an interrupt calculation 
different from those for operating the elevator. In this case, the 
calculation cycle for conducting surveillance of the stack region 
may be different from the calculation cycle for operating the 
elevator . 
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Embodiment 22 

In Embodiments 17 to 21, the main body of the control apparatus 
for controlling operation of the elevator is provided with the stack 
region surveillance portion. However, when a safety device is used 
in addition to the main body of the control apparatus, the safety 
device can be provided with the stack region surveillance portion. 
In this case, the safety device is constructed in a similar manner 
to that of Fig. 31 and mounted in, for example, the car. The CPU 
201 and the ROM 202 of the safety device constitute the stack region 
surveillance portion 206 similar to those of Embodiments 17 to 20. 
The stack region surveillance portion 206 of the safety device 
monitors the stack region of the RAM 203 of the safety device. 

In the safety device as well, after initial operation similar 
to that of Fig. 31 has been performed, an interrupt waiting state 
is established. Then, the interrupt calculations in the safety 
device are also repeatedly performed at intervals of a calculation 
period . 

Fig. 41 is a flowchart showing flow of the interrupt 
calculations in the elevator control apparatus according to 
Embodiment 22 of the present invention, that is, the safety device. 
In starting the interrupt calculations , the state of the surveillance 
region is first confirmed (step S31). That is, it is confirmed 
whether or not the state of the surveillance region D000H to D010H 
is 0000H. 
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When the surveillance region is not 0000H, a calculation for 
quickly stopping the car is performed (step S32) . When there is 
no abnormality in the surveillance region, an input calculation 
for inputting signals required for the calculations is performed 
(stepS33) . Then, a car position calculation (stepS34) forobtaining 
a current position of the car and a distance from the current position 
to a terminal floor, a car speed calculation (step S35) for obtaining 
a speed of the car from a moving amount of the car, and a judgment 
criterion calculation (step S36) for obtaining a judgment criterion 
value (e.g., in Fig. 19) for an abnormal speed corresponding to 
the distance to the terminal floor are performed. 

After that, a safety surveillance calculation (step S37) for 
detecting an abnormality in the speed of the car from the speed 
of the car and the judgment criterion value is performed. When the 
safety surveillance calculation or the quick stop calculation is 
performed, a monitor calculation for displaying the state of the 
elevator on the monitor (stepS38) is performed. Finally, an output 
calculation (step S39) for outputting a command signal required 
for allowing the car to run or quickly stopping the car is performed. 

When the signal for quickly stopping the car is output from 
the safety device, the car is quickly stopped by the emergency stop 
device or the braking device as described in the aforementioned 
embodiments . 

Thus, even by providing the safety device separated from the 
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main body of the control apparatus with the stack region surveillance 
portion 206, the components of the safety device are prevented from 
being damaged. This can result in the enhancement of reliability. 

Although the operation program for the stack region 
surveillance portion is stored in the ROM 202 in Embodiments 17 
to 22, it may also be used after having been stored into a recording 
medium such as a hard disk or a CD. 
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